Predefined Text Objects
There are several predefined text objects. These objects are associated with variables used in the predefined FlexConfig objects. In most cases, you must edit these objects to add values if you use the associated FlexConfig object, or you will see errors during deployment. Although some of these objects contain default values, others are empty.
For information on editing text objects, see Configure FlexConfig Text Objects.
|
Name |
Description |
Associated FlexConfig Object |
|---|---|---|
|
defaultDNSNameServerList (Deprecated.) |
The DNS server IP address to configure in the Default DNS group. Starting with version 6.3, configure DNS for the data interfaces in the Threat Defense Platform Settings policy. |
Default_DNS_Configure |
|
defaultDNSParameters (Deprecated.) |
The parameters to control DNS behavior for the default DNS server group. The object contains separate entries, in order, for retries, timeout, expire-entry-timer, poll-timer, domain-name. Starting with version 6.3, configure DNS for the data interfaces in the Threat Defense Platform Settings policy. |
Default_DNS_Configure |
|
disableInspectProtocolList |
Disables protocols in the default policy map (global_policy). |
Disable_Default_Inspection_Protocol |
|
dnsNameServerList |
The DNS server IP address to configure in a user-defined DNS group. |
DNS_Configure |
|
dnsParameters |
The parameters to control DNS behavior for a non-default DNS server group. The object contains separate entries, in order, for retries, timeout, domain-name, name-server-interface. |
DNS_Configure |
|
enableInspectProtocolList |
Enables protocols in the default policy map (global_policy). You are prevented from adding protocols whose inspection conflicts with Snort inspection. |
Enable_Default_Inspection_Protocol |
|
IPv6RoutingHeaderDropList |
The list of IPv6 routing header types that you want to disallow. IPv6 inspection drops packets that contain these headers without logging the drop. |
Inspect_IPv6_Configure |
|
IPv6RoutingHeaderDropLogList |
The list of IPv6 routing header types that you want to disallow and log. IPv6 inspection drops packets that contain these headers and sends a syslog message about the drop. |
Inspect_IPv6_Configure |
|
IPv6RoutingHeaderLogList |
The list of IPv6 routing header types that you want to allow but log. IPv6 inspection allows packets that contain these headers, but sends a syslog message about the existence of the header. |
Inspect_IPv6_Configure |
|
isIsAddressFamily |
The IPv4 or IPv6 address family. |
ISIS_Configure ISIS_Interface_Configuration |
|
IsIsIntfList |
List of logical interface names. |
ISIS_Interface_Configuration |
|
isIsISType |
IS Type (level-1, level-2-only or level-1-2). |
ISIS_Configure |
|
isIsNet |
Network entity. |
ISIS_Configure |
|
isServiceIdentifier |
When false, uses the standard web-cache service identifier. |
Wccp_Configure |
|
netflow_Destination |
Defines a single NetFlow export destination's interface, destination, and UDP port number. |
Netflow_Add_Destination |
|
netflow_Event_Types |
Defines the types of events to be exported for a destination as any subset of: all, flow-create, flow-defined, flow-teardown, flow-update. |
Netflow_Add_Destination |
|
netflow_Parameters |
Provides the NetFlow export global settings: active refresh interval (number of minutes between flow update events), delay (flow create delay in seconds; default 0 = command will not appear), and template time-out rate in minutes. |
Netflow_Set_Parameters |
|
PrefixDelegationInside |
Configures the inside interface for DHCPv6 prefix delegation. The object includes multiple entries, in order, interface name, IPv6 suffix with prefix length, and prefix pool name. |
None, but could be used with a copy of DHCPv6_Prefix_Delegation_Configure. |
|
PrefixDelegationOutside |
Configure the outside DHCPv6 prefix delegation client. The object includes multiple entries, in order, interface name and IPv6 prefix length |
None, but could be used with a copy of DHCPv6_Prefix_Delegation_Configure. |
|
serviceIdentifier |
Dynamic WCCP service identifier number. |
Wccp_Configure |
|
tcp_conn_limit (Deprecated.) |
Parameters used for configuring the TCP embryonic connection limits. Starting with version 6.3, configure these features in the Threat Defense Service Policy, which you can find on the Advanced tab of the access control policy assigned to the device. |
TCP_Embryonic_Conn_Limit |
|
tcp_conn_misc (Deprecated.) |
Parameters used for configuring the TCP embryonic connection settings. Starting with version 6.3, configure these features in the Threat Defense Service Policy, which you can find on the Advanced tab of the access control policy assigned to the device. |
TCP_Embryonic_Conn_Limit, TCP_Embryonic_Conn_Timeout |
|
tcp_conn_timeout (Deprecated.) |
Parameters used for configuring the TCP embryonic connection timeouts. Starting with version 6.3, configure these features in the Threat Defense Service Policy, which you can find on the Advanced tab of the access control policy assigned to the device. |
TCP_Embryonic_Conn_Timeout |
|
tcpMssBytes |
Maximum segment size in bytes. |
Sysopt_basic |
|
tcpMssMinimum |
Checks whether to set maximum segment size (MSS), which is set only if this flag is true. |
Sysopt_basic |
|
threat_detection_statistics |
Parameters used for threat detection statistics for TCP Intercept. |
Threat_Detection_Configure |
|
vxlan_Nve_Only |
Parameters for configuring NVE-only on interface:
|
VxLAN_Make_Nve_Only |
|
vxlan_Port_And_Nve |
Parameters used for configuring ports and NVE for VXLAN:
|
VxLAN_Configure_Port_And_Nve |
|
vxlan_Vni |
Parameters used for creating VNI:
|
VxLAN_Make_Vni |
|
wccpPassword |
WCCP password. |
Wccp_Configure |