Class CIM_IPSOFilterEntry
extends CIM_FilterEntryBase

An IPSOFilterEntry is used to match traffic based on the IP Security Options header values (ClassificationLevel and ProtectionAuthority) as defined in RFC1108. This type of FilterEntry is used to adjust the IPsec encryption level according to the IPSO classification of the traffic (e.g., secret, confidential, restricted, etc.).

Table of Contents
Hierarchy
Direct Known Subclasses
Class Qualifiers
Class Properties
Class Methods

Class Hierarchy

CIM_ManagedElement
|
+--CIM_ManagedSystemElement
|
+--CIM_LogicalElement
|
+--CIM_FilterEntryBase
|
+--CIM_IPSOFilterEntry

Direct Known Subclasses

Class Qualifiers

Name	Data Type	Value
Description	string	An IPSOFilterEntry is used to match traffic based on the IP Security Options header values (ClassificationLevel and ProtectionAuthority) as defined in RFC1108. This type of FilterEntry is used to adjust the IPsec encryption level according to the IPSO classification of the traffic (e.g., secret, confidential, restricted, etc.).
MappingStrings	string	IPSP Policy Model.IETF\|IPSOFilterEntry
UMLPackagePath	string	CIM::Network::Filtering
Version	string	2.8.0

Class Properties

Local Class Properties

Name	Data Type	Default Value	Qualifiers
Name	Data Type	Default Value	Name	Data Type	Value
ClassificationLevel	uint16
			Description	string	This is the value to be matched when MatchConditionType is 1 or 3 - meaning that "Classification Level" should be filtered. In RFC1108, the following semantics are specified: TopSecret, Secret, Confidential, and Unclassified. Note that this enumeration's values are different than the RFC list and the IETF's IPSP Policy Model since those lists are simply bit maps, and do not include specific values for "Other" or "No Filtering".
			MappingStrings	string	IPSP Policy Model.IETF\|IPSOFilterEntry.MatchConditionValue, RFC1108.IETF\|Section 2.3
			ModelCorrespondence	string	CIM_IPSOFilterEntry.MatchConditionType, CIM_IPSOFilterEntry.OtherClassificationLevel
			Required	boolean	true
			ValueMap	string	1, 2, 3, 4, 5, 6, .., 0x8000..
			Values	string	Other, No Filtering on Classification Level, Top Secret, Secret, Confidential, Unclassified, DMTF Reserved, Vendor Reserved
MatchConditionType	uint16
			Description	string	MatchConditionType specifies whether to match based on traffic classification level, protection authority or both. Note that this enumeration is modified from its definition in the IETF's IPSP Policy Model to allow for both classification level and protection authority checking, and to allow the enumerated value, "Other", to be added in the future.
			MappingStrings	string	IPSP Policy Model.IETF\|IPSOFilterEntry.MatchConditionType
			ModelCorrespondence	string	CIM_IPSOFilterEntry.ClassificationLevel, CIM_IPSOFilterEntry.ProtectionAuthorities
			Required	boolean	true
			ValueMap	string	2, 3, 4
			Values	string	Classification Level, Protection Authority, Both Classification Level and Protection Authority
OtherClassificationLevel	string
			Description	string	Description of the level when the value 1 ("Other") is specified for the property, ClassificationLevel.
			ModelCorrespondence	string	CIM_IPSOFilterEntry.ClassificationLevel
OtherProtectionAuthorities	string[]
			Description	string	Description of the authority when the value 1 ("Other") is specified for the property, ProtectionAuthorities.
			ModelCorrespondence	string	CIM_IPSOFilterEntry.ProtectionAuthorities
ProtectionAuthorities	uint16[]
			Description	string	These are the values to be matched when MatchConditionType is 2 or 3 - meaning that "Protection Authority" should be filtered. In RFC1108, the following authorities are specified: GENSER, SIOP-ESI, SCI, NSA and DOE. Note that multiple authorities may be specified. This enumeration is modified from its definition in the RFC and IETF's IPSP Policy Model. Those lists are simply bit maps, and do not include specific values for "Other" or "No Filtering".
			MappingStrings	string	IPSP Policy Model.IETF\|IPSOFilterEntry.MatchConditionValue, RFC1108.IETF\|Section 2.4
			ModelCorrespondence	string	CIM_IPSOFilterEntry.MatchConditionType, CIM_IPSOFilterEntry.OtherProtectionAuthorities
			Required	boolean	true
			ValueMap	string	1, 2, 3, 4, 5, 6, 7, .., 0x8000..
			Values	string	Other, No Filtering on Protection Authority, GENSER, SIOP-ESI, SCI, NSA, DOE, DMTF Reserved, Vendor Reserved

Inherited Properties

Name	Data Type	Class Origin
Caption	string	CIM_ManagedElement
CommunicationStatus	uint16	CIM_ManagedSystemElement
CreationClassName	string	CIM_FilterEntryBase
Description	string	CIM_ManagedElement
DetailedStatus	uint16	CIM_ManagedSystemElement
ElementName	string	CIM_ManagedElement
Generation	uint64	CIM_ManagedElement
HealthState	uint16	CIM_ManagedSystemElement
InstallDate	datetime	CIM_ManagedSystemElement
InstanceID	string	CIM_ManagedElement
IsNegated	boolean	CIM_FilterEntryBase
Name	string	CIM_FilterEntryBase
OperatingStatus	uint16	CIM_ManagedSystemElement
PrimaryStatus	uint16	CIM_ManagedSystemElement
Status	string	CIM_ManagedSystemElement
SystemCreationClassName	string	CIM_FilterEntryBase
SystemName	string	CIM_FilterEntryBase
OperationalStatus	uint16[]	CIM_ManagedSystemElement
StatusDescriptions	string[]	CIM_ManagedSystemElement

Class CIM_IPSOFilterEntryextends CIM_FilterEntryBase

Table of Contents Hierarchy Direct Known Subclasses Class Qualifiers Class Properties Class Methods