# Class CIM_IPSOFilterEntry
extends CIM_FilterEntryBase

An IPSOFilterEntry is used to match traffic based on the IP Security Options header values (ClassificationLevel and ProtectionAuthority) as defined in RFC1108. This type of FilterEntry is used to adjust the IPsec encryption level according to the IPSO classification of the traffic (e.g., secret, confidential, restricted, etc.).

### Table of Contents
Hierarchy
Direct Known Subclasses
Class Qualifiers
Class Properties
Class Methods

## Class Hierarchy

CIM_ManagedElement
|
+--CIM_ManagedSystemElement
|
+--CIM_LogicalElement
|
+--CIM_FilterEntryBase
|
+--CIM_IPSOFilterEntry

## Direct Known Subclasses

## Class Qualifiers

Name | Data Type | Value
--- | --- | ---
Description | string | An IPSOFilterEntry is used to match traffic based on the IP Security Options header values (ClassificationLevel and ProtectionAuthority) as defined in RFC1108. This type of FilterEntry is used to adjust the IPsec encryption level according to the IPSO classification of the traffic (e.g., secret, confidential, restricted, etc.).
MappingStrings | string | IPSP Policy Model.IETF|IPSOFilterEntry
UMLPackagePath | string | CIM::Network::Filtering
Version | string | 2.8.0

## Class Properties

### Local Class Properties

Name | Data Type | Default Value | Qualifiers
--- | --- | --- | ---
Name | Data Type | Value
ClassificationLevel | uint16 |

Description

string

This is the value to be matched when MatchConditionType is 1 or 3 - meaning that "Classification Level" should be filtered. In RFC1108, the following semantics are specified: TopSecret, Secret, Confidential, and Unclassified. Note that this enumeration's values are different than the RFC list and the IETF's IPSP Policy Model since those lists are simply bit maps, and do not include specific values for "Other" or "No Filtering".

MappingStrings | string | IPSP Policy Model.IETF|IPSOFilterEntry.MatchConditionValue, RFC1108.IETF|Section 2.3
ModelCorrespondence | string | CIM_IPSOFilterEntry.MatchConditionType, CIM_IPSOFilterEntry.OtherClassificationLevel
Required | boolean | true
ValueMap | string | 1, 2, 3, 4, 5, 6, .., 0x8000..
Values | string | Other, No Filtering on Classification Level, Top Secret, Secret, Confidential, Unclassified, DMTF Reserved, Vendor Reserved
MatchConditionType | uint16 |
Description | string | MatchConditionType specifies whether to match based on traffic classification level, protection authority or both. Note that this enumeration is modified from its definition in the IETF's IPSP Policy Model to allow for both classification level and protection authority checking, and to allow the enumerated value, "Other", to be added in the future.
MappingStrings | string | IPSP Policy Model.IETF|IPSOFilterEntry.MatchConditionType
ModelCorrespondence | string | CIM_IPSOFilterEntry.ClassificationLevel, CIM_IPSOFilterEntry.ProtectionAuthorities
Required | boolean | true
ValueMap | string | 2, 3, 4
Values | string | Classification Level, Protection Authority, Both Classification Level and Protection Authority
OtherClassificationLevel | string |
Description | string | Description of the level when the value 1 ("Other") is specified for the property, ClassificationLevel.
ModelCorrespondence | string | CIM_IPSOFilterEntry.ClassificationLevel
OtherProtectionAuthorities | string[] |
Description | string | Description of the authority when the value 1 ("Other") is specified for the property, ProtectionAuthorities.
ModelCorrespondence | string | CIM_IPSOFilterEntry.ProtectionAuthorities
ProtectionAuthorities | uint16[] |

Description

string

These are the values to be matched when MatchConditionType is 2 or 3 - meaning that "Protection Authority" should be filtered. In RFC1108, the following authorities are specified: GENSER, SIOP-ESI, SCI, NSA and DOE. Note that multiple authorities may be specified. This enumeration is modified from its definition in the RFC and IETF's IPSP Policy Model. Those lists are simply bit maps, and do not include specific values for "Other" or "No Filtering".

MappingStrings | string | IPSP Policy Model.IETF|IPSOFilterEntry.MatchConditionValue, RFC1108.IETF|Section 2.4
ModelCorrespondence | string | CIM_IPSOFilterEntry.MatchConditionType, CIM_IPSOFilterEntry.OtherProtectionAuthorities
Required | boolean | true
ValueMap | string | 1, 2, 3, 4, 5, 6, 7, .., 0x8000..
Values | string | Other, No Filtering on Protection Authority, GENSER, SIOP-ESI, SCI, NSA, DOE, DMTF Reserved, Vendor Reserved

### Inherited Properties

Name | Data Type | Class Origin
--- | --- | ---
Caption | string | CIM_ManagedElement
CommunicationStatus | uint16 | CIM_ManagedSystemElement
CreationClassName | string | CIM_FilterEntryBase
Description | string | CIM_ManagedElement
DetailedStatus | uint16 | CIM_ManagedSystemElement
ElementName | string | CIM_ManagedElement
HealthState | uint16 | CIM_ManagedSystemElement
InstallDate | datetime | CIM_ManagedSystemElement
InstanceID | string | CIM_ManagedElement
IsNegated | boolean | CIM_FilterEntryBase
Name | string | CIM_FilterEntryBase
OperatingStatus | uint16 | CIM_ManagedSystemElement
PrimaryStatus | uint16 | CIM_ManagedSystemElement
Status | string | CIM_ManagedSystemElement
SystemCreationClassName | string | CIM_FilterEntryBase
SystemName | string | CIM_FilterEntryBase
OperationalStatus | uint16[] | CIM_ManagedSystemElement
StatusDescriptions | string[] | CIM_ManagedSystemElement

## Class Methods