Class CIM_IPSOFilterEntry
extends CIM_FilterEntryBase

An IPSOFilterEntry is used to match traffic based on the IP Security Options header values (ClassificationLevel and ProtectionAuthority) as defined in RFC1108. This type of FilterEntry is used to adjust the IPsec encryption level according to the IPSO classification of the traffic (e.g., secret, confidential, restricted, etc.).

Table of Contents
Hierarchy
Direct Known Subclasses
Class Qualifiers
Class Properties
Class Methods

Class Hierarchy

CIM_ManagedElement
|
+--CIM_ManagedSystemElement
|
+--CIM_LogicalElement
|
+--CIM_FilterEntryBase
|
+--CIM_IPSOFilterEntry

Direct Known Subclasses

Class Qualifiers

Name	Data Type	Value
Description	string	An IPSOFilterEntry is used to match traffic based on the IP Security Options header values (ClassificationLevel and ProtectionAuthority) as defined in RFC1108. This type of FilterEntry is used to adjust the IPsec encryption level according to the IPSO classification of the traffic (e.g., secret, confidential, restricted, etc.).
MappingStrings	string	IPSP Policy Model.IETF\|IPSOFilterEntry
UMLPackagePath	string	CIM::Network::Filtering
Version	string	2.8.0

Class Properties

Local Class Properties

Name	Data Type	Default Value	Qualifiers
Name	Data Type	Default Value	Name	Data Type	Value
ClassificationLevel	uint16
			Description	string	This is the value to be matched when MatchConditionType is 1 or 3 - meaning that "Classification Level" should be filtered. In RFC1108, the following semantics are specified: TopSecret, Secret, Confidential, and Unclassified. Note that this enumeration's values are different than the RFC list and the IETF's IPSP Policy Model since those lists are simply bit maps, and do not include specific values for "Other" or "No Filtering".
			MappingStrings	string	IPSP Policy Model.IETF\|IPSOFilterEntry.MatchConditionValue, RFC1108.IETF\|Section 2.3
			ModelCorrespondence	string	CIM_IPSOFilterEntry.MatchConditionType, CIM_IPSOFilterEntry.OtherClassificationLevel
			Required	boolean	true
			ValueMap	string	1, 2, 3, 4, 5, 6, .., 0x8000..
			Values	string	Other, No Filtering on Classification Level, Top Secret, Secret, Confidential, Unclassified, DMTF Reserved, Vendor Reserved
MatchConditionType	uint16
			Description	string	MatchConditionType specifies whether to match based on traffic classification level, protection authority or both. Note that this enumeration is modified from its definition in the IETF's IPSP Policy Model to allow for both classification level and protection authority checking, and to allow the enumerated value, "Other", to be added in the future.
			MappingStrings	string	IPSP Policy Model.IETF\|IPSOFilterEntry.MatchConditionType
			ModelCorrespondence	string	CIM_IPSOFilterEntry.ClassificationLevel, CIM_IPSOFilterEntry.ProtectionAuthorities
			Required	boolean	true
			ValueMap	string	2, 3, 4
			Values	string	Classification Level, Protection Authority, Both Classification Level and Protection Authority
OtherClassificationLevel	string
			Description	string	Description of the level when the value 1 ("Other") is specified for the property, ClassificationLevel.
			ModelCorrespondence	string	CIM_IPSOFilterEntry.ClassificationLevel
OtherProtectionAuthorities	string[]
			Description	string	Description of the authority when the value 1 ("Other") is specified for the property, ProtectionAuthorities.
			ModelCorrespondence	string	CIM_IPSOFilterEntry.ProtectionAuthorities
ProtectionAuthorities	uint16[]
			Description	string	These are the values to be matched when MatchConditionType is 2 or 3 - meaning that "Protection Authority" should be filtered. In RFC1108, the following authorities are specified: GENSER, SIOP-ESI, SCI, NSA and DOE. Note that multiple authorities may be specified. This enumeration is modified from its definition in the RFC and IETF's IPSP Policy Model. Those lists are simply bit maps, and do not include specific values for "Other" or "No Filtering".
			MappingStrings	string	IPSP Policy Model.IETF\|IPSOFilterEntry.MatchConditionValue, RFC1108.IETF\|Section 2.4
			ModelCorrespondence	string	CIM_IPSOFilterEntry.MatchConditionType, CIM_IPSOFilterEntry.OtherProtectionAuthorities
			Required	boolean	true
			ValueMap	string	1, 2, 3, 4, 5, 6, 7, .., 0x8000..
			Values	string	Other, No Filtering on Protection Authority, GENSER, SIOP-ESI, SCI, NSA, DOE, DMTF Reserved, Vendor Reserved

Inherited Properties

Name	Data Type
Caption	string
CommunicationStatus	uint16
CreationClassName	string
Description	string
DetailedStatus	uint16
ElementName	string
Generation	uint64
HealthState	uint16
InstallDate	datetime
InstanceID	string
IsNegated	boolean
Name	string
OperatingStatus	uint16
PrimaryStatus	uint16
Status	string
SystemCreationClassName	string
SystemName	string
OperationalStatus	uint16[]
StatusDescriptions	string[]

Class CIM_IPSOFilterEntry extends CIM_FilterEntryBase

Table of Contents Hierarchy Direct Known Subclasses Class Qualifiers Class Properties Class Methods