ASA Layer 5 - 7 packet inspection

Layer 5 - 7 application inspection

Scenario

  1. Outside user connects to the FTP server in DMZ
  2. The user having full rights to the FTP server deletes a file on the server.
  3. Admin wants to prohibit outside user to delete any file.

Before

As you can see, outside user can delete files on FTP server.

After

I will edit a global_policy that is already configured.

Policy map: Reset option will disconnect the connection between FTP server and client.

class-map

CLI config

Result

 When I tried to delete the file named test3.txt, I lost connection to the FTP server.