<?xml version="1.0"?>
<FWBuilderResources>
    <Target name="FWSM">
      <description>Cisco FWSM</description>
      <status>active</status>
      <group>Cisco</group>
      <compiler>fwb_pix</compiler>
      <dialog>pix</dialog>
      <installer>fwb_inst_pix</installer>
      <diff>fwb_pix_diff</diff>
      <supported_os>fwsm_os</supported_os>

      <versions>2.3,3.2,4.x</versions>

      <options>
        <default>
          <pix_emulate_out_acl>true</pix_emulate_out_acl>
          <pix_generate_out_acl>true</pix_generate_out_acl>
          <pix_include_comments>true</pix_include_comments>
          <pix_use_acl_remarks>true</pix_use_acl_remarks>
          <pix_add_clear_statements>true</pix_add_clear_statements>
          <pix_assume_fw_part_of_any>true</pix_assume_fw_part_of_any>
          <pix_floodguard>true</pix_floodguard>
          <pix_default_loglevel>info</pix_default_loglevel>
          <pix_default_logint>300</pix_default_logint>
          <pix_emblem_log_format>false</pix_emblem_log_format>
          <pix_rule_syslog_settings>false</pix_rule_syslog_settings>
          <pix_syslog_device_id_supported>false</pix_syslog_device_id_supported>
          <pix_security_fragguard_supported>true</pix_security_fragguard_supported>
          <pix_route_dnat_supported>true</pix_route_dnat_supported>
        </default>

        <version_2.3>
          <pix_emulate_out_acl>true</pix_emulate_out_acl>
          <pix_include_comments>true</pix_include_comments>
          <pix_use_acl_remarks>true</pix_use_acl_remarks>
          <pix_add_clear_statements>true</pix_add_clear_statements>
          <pix_assume_fw_part_of_any>true</pix_assume_fw_part_of_any>
          <pix_floodguard_supported>true</pix_floodguard_supported>
          <pix_floodguard>true</pix_floodguard>
          <pix_default_loglevel>info</pix_default_loglevel>
          <pix_default_logint>300</pix_default_logint>
          <pix_emblem_log_format>true</pix_emblem_log_format>
          <pix_rule_syslog_settings>true</pix_rule_syslog_settings>
          <pix_syslog_device_id_supported>true</pix_syslog_device_id_supported>
          <pix_security_fragguard_supported>false</pix_security_fragguard_supported>
          <pix_route_dnat_supported>false</pix_route_dnat_supported>
          <pix_outbound_acl_supported>true</pix_outbound_acl_supported>
          <pix_timeout_rpc_is_sunrpc>false</pix_timeout_rpc_is_sunrpc>
          <pix_object_groups_supported>true</pix_object_groups_supported>
          <pix_resetoutside_supported>true</pix_resetoutside_supported>

          <pix_commands>
            <clear_acl>clear access-list</clear_acl>
            <clear_og>clear object-group</clear_og>
            <clear_icmp>clear icmp</clear_icmp>
            <clear_telnet>clear telnet</clear_telnet>
            <clear_ssh>clear ssh</clear_ssh>
            <clear_ntp>clear ntp</clear_ntp>
            <clear_snmp>clear snmp-server</clear_snmp>
            <clear_xlate>clear xlate</clear_xlate>
            <clear_static>clear static</clear_static>
            <clear_global>clear global</clear_global>
            <clear_nat>clear nat</clear_nat>
            <ip_addr_static>
ip address %il %a %n
            </ip_addr_static>
            <ip_addr_dyn>
ip address %il dhcp setroute retry 10
            </ip_addr_dyn>
            <nameif>
nameif %in %il security%sl
            </nameif>
          </pix_commands>
    
          <timeouts>
              <xlate_hh>3</xlate_hh>
              <xlate_mm>0</xlate_mm>
              <xlate_ss>0</xlate_ss>
      
              <conn_hh>1</conn_hh>
              <conn_mm>0</conn_mm>
              <conn_ss>0</conn_ss>
      
              <udp_hh>0</udp_hh>
              <udp_mm>2</udp_mm>
              <udp_ss>0</udp_ss>
      
              <rpc_hh>0</rpc_hh>
              <rpc_mm>10</rpc_mm>
              <rpc_ss>0</rpc_ss>
      
              <h323_hh>0</h323_hh>
              <h323_mm>5</h323_mm>
              <h323_ss>0</h323_ss>
      
              <sip_hh>0</sip_hh>
              <sip_mm>30</sip_mm>
              <sip_ss>0</sip_ss>
      
              <sip_media_hh>0</sip_media_hh>
              <sip_media_mm>2</sip_media_mm>
              <sip_media_ss>0</sip_media_ss>
      
              <half-closed_hh>0</half-closed_hh>
              <half-closed_mm>10</half-closed_mm>
              <half-closed_ss>0</half-closed_ss>

              <uauth_hh>2</uauth_hh>
              <uauth_mm>0</uauth_mm>
              <uauth_ss>0</uauth_ss>
              <uauth_abs>True</uauth_abs>
              <uauth_inact>False</uauth_inact>
      
            <telnet_timeout>5</telnet_timeout>
            <ssh_timeout>5</ssh_timeout>
          </timeouts>
        
          <fixups>
            <list>dns_fixup,ftp_fixup,h323_h225_fixup,h323_ras_fixup,http_fixup,icmp_error_fixup,ils_fixup,mgcp_fixup,rsh_fixup,rtsp_fixup,sip_fixup,sip_udp_fixup,skinny_fixup,smtp_fixup,sqlnet_fixup,tftp_fixup</list>

            <use_fixup_commands>true</use_fixup_commands>
            <use_mpf_policy_map>false</use_mpf_policy_map>
            <use_policy_map_type_inspect>false</use_policy_map_type_inspect>

          </fixups>
        </version_2.3>


        <version_3.2>
          <pix_emulate_out_acl>true</pix_emulate_out_acl>
          <pix_generate_out_acl>true</pix_generate_out_acl>
          <pix_include_comments>true</pix_include_comments>
          <pix_use_acl_remarks>true</pix_use_acl_remarks>
          <pix_add_clear_statements>true</pix_add_clear_statements>
          <pix_assume_fw_part_of_any>true</pix_assume_fw_part_of_any>
          <pix_floodguard_supported>false</pix_floodguard_supported>
          <pix_floodguard>true</pix_floodguard>
          <pix_default_loglevel>info</pix_default_loglevel>
          <pix_default_logint>300</pix_default_logint>
          <pix_emblem_log_format>true</pix_emblem_log_format>
          <pix_rule_syslog_settings>true</pix_rule_syslog_settings>
          <pix_syslog_device_id_supported>true</pix_syslog_device_id_supported>
          <pix_security_fragguard_supported>false</pix_security_fragguard_supported>
          <pix_route_dnat_supported>false</pix_route_dnat_supported>
          <pix_outbound_acl_supported>true</pix_outbound_acl_supported>
          <pix_timeout_rpc_is_sunrpc>true</pix_timeout_rpc_is_sunrpc>
          <pix_object_groups_supported>true</pix_object_groups_supported>
          <pix_resetoutside_supported>false</pix_resetoutside_supported>

          <pix_commands>
            <clear_acl>clear config access-list</clear_acl>
            <clear_og>clear config object-group</clear_og>
            <clear_icmp>clear config icmp</clear_icmp>
            <clear_telnet>clear config telnet</clear_telnet>
            <clear_ssh>clear config ssh</clear_ssh>
            <clear_xlate>clear xlate</clear_xlate>
            <clear_static>clear config static</clear_static>
            <clear_global>clear config global</clear_global>
            <clear_nat>clear config nat</clear_nat>
            <clear_ntp>clear ntp</clear_ntp>
            <clear_snmp>clear snmp-server</clear_snmp>

            <ip_addr_static>
ip address %il %a %n
            </ip_addr_static>
            <ip_addr_dyn>
ip address %il dhcp setroute retry 10
            </ip_addr_dyn>
            <nameif>
nameif %in %il security%sl
            </nameif>
          </pix_commands>
    
          <timeouts>
              <xlate_hh>3</xlate_hh>
              <xlate_mm>0</xlate_mm>
              <xlate_ss>0</xlate_ss>
      
              <conn_hh>1</conn_hh>
              <conn_mm>0</conn_mm>
              <conn_ss>0</conn_ss>
      
              <udp_hh>0</udp_hh>
              <udp_mm>2</udp_mm>
              <udp_ss>0</udp_ss>
      
              <rpc_hh>0</rpc_hh>
              <rpc_mm>10</rpc_mm>
              <rpc_ss>0</rpc_ss>
      
              <h323_hh>0</h323_hh>
              <h323_mm>5</h323_mm>
              <h323_ss>0</h323_ss>
      
              <sip_hh>0</sip_hh>
              <sip_mm>30</sip_mm>
              <sip_ss>0</sip_ss>
      
              <sip_media_hh>0</sip_media_hh>
              <sip_media_mm>2</sip_media_mm>
              <sip_media_ss>0</sip_media_ss>
      
              <half-closed_hh>0</half-closed_hh>
              <half-closed_mm>10</half-closed_mm>
              <half-closed_ss>0</half-closed_ss>

              <uauth_hh>2</uauth_hh>
              <uauth_mm>0</uauth_mm>
              <uauth_ss>0</uauth_ss>
              <uauth_abs>True</uauth_abs>
              <uauth_inact>False</uauth_inact>
      
            <telnet_timeout>5</telnet_timeout>
            <ssh_timeout>5</ssh_timeout>
          </timeouts>
        
          <fixups>
            <list>dns_fixup,ftp_fixup,h323_h225_fixup,h323_ras_fixup,http_fixup,icmp_error_fixup,ils_fixup,mgcp_fixup,rsh_fixup,rtsp_fixup,sip_fixup,sip_udp_fixup,skinny_fixup,smtp_fixup,sqlnet_fixup,tftp_fixup</list>

            <use_fixup_commands>false</use_fixup_commands>
            <use_mpf_policy_map>true</use_mpf_policy_map>
            <use_policy_map_type_inspect>true</use_policy_map_type_inspect>

          </fixups>

        </version_3.2>


        <version_4.x>
          <pix_emulate_out_acl>true</pix_emulate_out_acl>
          <pix_generate_out_acl>true</pix_generate_out_acl>
          <pix_include_comments>true</pix_include_comments>
          <pix_use_acl_remarks>true</pix_use_acl_remarks>
          <pix_add_clear_statements>true</pix_add_clear_statements>
          <pix_assume_fw_part_of_any>true</pix_assume_fw_part_of_any>
          <pix_floodguard_supported>false</pix_floodguard_supported>
          <pix_floodguard>true</pix_floodguard>
          <pix_default_loglevel>info</pix_default_loglevel>
          <pix_default_logint>300</pix_default_logint>
          <pix_emblem_log_format>true</pix_emblem_log_format>
          <pix_rule_syslog_settings>true</pix_rule_syslog_settings>
          <pix_syslog_device_id_supported>true</pix_syslog_device_id_supported>
          <pix_security_fragguard_supported>false</pix_security_fragguard_supported>
          <pix_route_dnat_supported>false</pix_route_dnat_supported>
          <pix_outbound_acl_supported>true</pix_outbound_acl_supported>
          <pix_timeout_rpc_is_sunrpc>true</pix_timeout_rpc_is_sunrpc>
          <pix_object_groups_supported>true</pix_object_groups_supported>
          <pix_resetoutside_supported>false</pix_resetoutside_supported>

          <pix_commands>
            <clear_acl>clear config access-list</clear_acl>
            <clear_og>clear config object-group</clear_og>
            <clear_icmp>clear config icmp</clear_icmp>
            <clear_telnet>clear config telnet</clear_telnet>
            <clear_ssh>clear config ssh</clear_ssh>
            <clear_xlate>clear xlate</clear_xlate>
            <clear_static>clear config static</clear_static>
            <clear_global>clear config global</clear_global>
            <clear_nat>clear config nat</clear_nat>
            <clear_ntp>clear ntp</clear_ntp>
            <clear_snmp>clear snmp-server</clear_snmp>

            <ip_addr_static>
ip address %il %a %n
            </ip_addr_static>
            <ip_addr_dyn>
ip address %il dhcp setroute retry 10
            </ip_addr_dyn>
            <nameif>
nameif %in %il security%sl
            </nameif>
          </pix_commands>
    
          <timeouts>
              <xlate_hh>3</xlate_hh>
              <xlate_mm>0</xlate_mm>
              <xlate_ss>0</xlate_ss>
      
              <conn_hh>1</conn_hh>
              <conn_mm>0</conn_mm>
              <conn_ss>0</conn_ss>
      
              <udp_hh>0</udp_hh>
              <udp_mm>2</udp_mm>
              <udp_ss>0</udp_ss>
      
              <rpc_hh>0</rpc_hh>
              <rpc_mm>10</rpc_mm>
              <rpc_ss>0</rpc_ss>
      
              <h323_hh>0</h323_hh>
              <h323_mm>5</h323_mm>
              <h323_ss>0</h323_ss>
      
              <sip_hh>0</sip_hh>
              <sip_mm>30</sip_mm>
              <sip_ss>0</sip_ss>
      
              <sip_media_hh>0</sip_media_hh>
              <sip_media_mm>2</sip_media_mm>
              <sip_media_ss>0</sip_media_ss>
      
              <half-closed_hh>0</half-closed_hh>
              <half-closed_mm>10</half-closed_mm>
              <half-closed_ss>0</half-closed_ss>

              <uauth_hh>2</uauth_hh>
              <uauth_mm>0</uauth_mm>
              <uauth_ss>0</uauth_ss>
              <uauth_abs>True</uauth_abs>
              <uauth_inact>False</uauth_inact>
      
            <telnet_timeout>5</telnet_timeout>
            <ssh_timeout>5</ssh_timeout>
          </timeouts>
        
          <fixups>
            <list>dns_fixup,ftp_fixup,h323_h225_fixup,h323_ras_fixup,http_fixup,icmp_error_fixup,ils_fixup,mgcp_fixup,rsh_fixup,rtsp_fixup,sip_fixup,sip_udp_fixup,skinny_fixup,smtp_fixup,sqlnet_fixup,tftp_fixup</list>

            <use_fixup_commands>false</use_fixup_commands>
            <use_mpf_policy_map>true</use_mpf_policy_map>
            <use_policy_map_type_inspect>true</use_policy_map_type_inspect>

          </fixups>

        </version_4.x>


      </options>

      <capabilities>
        <negation_in_interface_policy>False</negation_in_interface_policy>
        <negation_in_policy>False</negation_in_policy>
        <negation_in_nat>False</negation_in_nat>
        <logging_in_policy>True</logging_in_policy>
        <options_in_policy>True</options_in_policy>
        <supports_nat>True</supports_nat>
        <actions_in_nat>False</actions_in_nat>
        <inbound_interface_in_nat>True</inbound_interface_in_nat>
        <outbound_interface_in_nat>True</outbound_interface_in_nat>
        <supports_time>False</supports_time>
        <supports_accounting>False</supports_accounting>
        <security_levels>True</security_levels>
        <network_zones>True</network_zones>
        <unprotected_interfaces>False</unprotected_interfaces>
        <supports_prolog_epilog>True</supports_prolog_epilog>
        <supports_cluster>True</supports_cluster>
        <install_only_on_primary>True</install_only_on_primary>
        <actions>
            <Accept>
                <supported>True</supported>
                <description>Accept</description>
                <dialog_page>None</dialog_page>
            </Accept>
            <Deny>
                <supported>True</supported>
                <description>Deny</description>
                <dialog_page>None</dialog_page>
            </Deny>
            <Reject>
                <supported>False</supported>
                <description>Reject</description>
                <dialog_page>Reject</dialog_page>
            </Reject>
            <Accounting>
                <supported>False</supported>
                <description>Accounting</description>
                <dialog_page>None</dialog_page>
            </Accounting>
            <Tag>
                <supported>False</supported>
                <description>Tag</description>
                <dialog_page>None</dialog_page>
            </Tag>
            <Pipe>
                <supported>False</supported>
                <description>Pipe</description>
                <dialog_page>None</dialog_page>
            </Pipe>
            <Classify>
                <supported>False</supported>
                <description>Classify</description>
                <dialog_page>None</dialog_page>
            </Classify>
            <Custom>
                <supported>False</supported>
                <description>Custom</description>
                <dialog_page>None</dialog_page>
            </Custom>
            <Branch>
                <supported>False</supported>
                <description>Branch</description>
                <dialog_page>None</dialog_page>
            </Branch>
            <Route>
                <supported>False</supported>
                <description>Route</description>
                <dialog_page>None</dialog_page>
            </Route>
            <Translate>
                <supported>True</supported>
                <description>Translate</description>
                <dialog_page>None</dialog_page>
            </Translate>
            <NATBranch>
                <supported>False</supported>
                <description>Branch</description>
                <dialog_page>None</dialog_page>
            </NATBranch>
        </actions>
      </capabilities>

    </Target>

</FWBuilderResources>
