Table Of Contents

Predefined Optimization Policy

Predefined Optimization Policy

---

The WAAS software includes over 200 predefined optimization policy rules that help your WAAS system classify and optimize some of the most common traffic on your network. Table A-1 lists the predefined applications and class maps that WAAS will either optimize or pass through based on the policy rules that are provided with the system.

Before you create an optimization policy, we recommend that you review the predefined policy rules and modify them as appropriate. Often, you can more easily modify an existing policy rule than create a new one.

When reviewing Table A-1, note the following information:

•The subheadings represent the application names, and the associated class maps are listed under these subheadings. For example, Authentication is a type of application and Kerberos is a class map for that application.

•Applications and class maps with the word (monitored) next to them are monitored by the WAAS Central Manager, which can monitor statistics for up to 25 applications and 25 class maps at a time. To view statistics for one of the unmonitored applications, use one of the following methods:

–Use the WAAS CLI, which can display statistics for all applications and class maps on a WAAS device. For more information, see the Cisco Wide Area Application Services Command Reference.

–Modify the application or class map settings so the WAAS Central Manager GUI displays statistics for the desired application or class map. For more information, see Chapter 13, "Configuring Application Acceleration."

•WAAS Express devices have similar default policy rules but provide application acceleration only for HTTP, SSL, and SMB traffic. Where a different application accelerator is listed in Table A-1, it is not part of the WAAS Action for a WAAS Express device.

The WAAS software uses the following optimization technologies based on the type of traffic that it encounters:

•TFO (transport flow optimization)—A collection of optimization technologies such as automatic windows scaling, increased buffering, and selective acknowledgement that optimize all TCP traffic over your network.

•DRE (data redundancy elimination)—A compression technology that reduces the size of transmitted data by removing redundant information before sending the shortened data stream over the WAN. DRE operates on significantly larger streams and maintains a much larger compression history than LZ compression. DRE can use bidirectional, unidirectional, or adaptive caching. Unless noted in Table A-1, DRE caching is bidirectional.

•LZ (compression)—Another compression technology that operates on smaller data streams and keeps limited compression history compared to DRE.

•Application accelerator—A collection of individual application accelerators for the following traffic types: CIFS, EPM, HTTP, ICA, MAPI, NFS, SSL, and streaming video. (Some application accelerators are not available on WAAS Express devices.)

.

Table A-1 Predefined Traffic Policy Rules 

Application/Class Map	WAAS Action	Destination Ports
class-default (monitored)	LZ+TFO+ DRE-adaptive	All ports not included in other class maps
Authentication
apple-sasl	Passthrough	3659
auth	Passthrough	113
Kerberos	Passthrough	88, 888, 2053
kerberos-adm (monitored)	Passthrough	749
klogin	Passthrough	543
kpasswd	Passthrough	464
kshell	Passthrough	544
TACACS	Passthrough	49
tell	Passthrough	754
Backup (monitored)
Amanda	TFO	10080
backup-express	TFO	6123
CommVault	TFO	8400-8403
connected	TFO	16384
IBM-TSM	LZ+TFO+ DRE-unidirectional	1500-1502
Legato-NetWorker	TFO	7937, 7938, 7939
Legato-RepliStor	TFO	7144, 7145
Veritas-BackupExec (monitored)	TFO	1125, 3527, 6101, 6102, 6106
Veritas-NetBackup	TFO	13720, 13721, 13782, 13785
CAD
PDMWorks	LZ+TFO+DRE	30000, 40000
Call-Management
Cisco-CallManager	Passthrough	2443, 2748
cisco-q931-backhaul	Passthrough	2428
cisco-sccp	Passthrough	2000-2002
h323hostcall	Passthrough	1720
h323hostcallsc	Passthrough	1300
mgcp-callagent	Passthrough	2727
mgcp-gateway	Passthrough	2427
sip	Passthrough	5060
sip-tls	Passthrough	5061
VoIP-Control	Passthrough	1718, 1719, 11000-11999
CIFS
CIFS (monitored)	LZ+TFO+DRE+ CIFS accelerator	139, 445
Citrix
Citrix (monitored)	TFO+ ICA accelerator	1494, 2598, or a dynamic port associated with the citrix protocol match
Conferencing
cuseeme	Passthrough	7640, 7642, 7648, 7649
ezMeeting	Passthrough	10101-10103, 26260, 26261
MS-NetMeeting (monitored)	Passthrough	522, 1503, 1731
proshare	Passthrough	5713-5717
PSOM-MTLS	Passthrough	8057
VocalTec	Passthrough	1490, 6670, 25793, 22555
Console
cmd	Passthrough	514
exec	Passthrough	512
login	Passthrough	513
sshell	Passthrough	614
Telnet	Passthrough	23, 107
Telnets	Passthrough	992
Content-Management (monitored)
dmdocbroker	LZ+TFO+DRE	1489
Filenet	LZ+TFO+DRE	32768-32774
Directory-Services (monitored)
LDAP	LZ+TFO+ DRE-unidirectional	389, 8404
ldaps	Passthrough	636
msft-gc	LZ+TFO+ DRE-unidirectional	3268
msft-gc-ssl	Passthrough	3269
Email-and-Messaging (monitored)
ccmail	LZ+TFO+DRE	3264
groupwise	LZ+TFO+DRE	1677, 2800, 3800, 7100, 7101, 7180, 7181, 7205, 9850
imap	LZ+TFO+DRE	143
imap3	LZ+TFO+DRE	220
imaps	TFO	993
iso-tsap	LZ+TFO+DRE	102
lotusnote	LZ+TFO+DRE	1352
MAPI1 (monitored)	LZ+TFO+DRE+ MAPI accelerator	UUID:a4f1db00-ca47-1067-b31f-00dd010662da
MDaemon	LZ+TFO+DRE	3000, 3001
MS-Exchange-Directory-NSPI1	Passthrough	UUID:f5cc5a18-4264-101a-8c59-08002b2f8426
MS-Exchange-Directory-RFR1	Passthrough	UUID:1544f5e0-613c-11d1-93df-00c04fd7bd09
NNTP (monitored)	LZ+TFO+DRE	119
nntps (monitored)	TFO	563
openmail	LZ+TFO+DRE	5755, 5757, 5766, 5767, 5768, 5729
pcmail-srv	LZ+TFO+DRE	158
pop3	LZ+TFO+DRE	110
pop3s	LZ+TFO+DRE	995
QMTP	TFO	209
smtp (monitored)	LZ+TFO+DRE	25
smtps	TFO	465
Enterprise-Applications (monitored)
MS-GROOVE	TFO	2492
SAP (monitored)	LZ+TFO+DRE	3200-3204, 3206-3219, 3221-3224, 3226-3259, 3261-3263, 3265-3267, 3270-3282, 3284-3305, 3307-3351, 3353-3388, 3390-3399, 3600-3658, 3662-3699
Siebel	LZ+TFO+DRE	2320, 2321, 8448
File-System (monitored)
afpovertcp	LZ+TFO+DRE	548
afs3	LZ+TFO+DRE	7000-7009
ncp	LZ+TFO+DRE	524
NFS	LZ+TFO+DRE+ NFS accelerator	2049
sunrpc	Passthrough	111
File-Transfer (monitored)
BFTP	LZ+TFO+DRE	152
ftp (monitored)	Passthrough	21
ftp-data2	LZ+TFO+DRE	20 (source port)
ftps	TFO	990
ftps-data2	Passthrough	989 (source port)
sftp	LZ+TFO+DRE	115
TFTP	LZ+TFO+DRE	69
TFTPS	TFO	3713
Instant Messaging
AOL	Passthrough	5190-5193
Apple-iChat	Passthrough	5297, 5298
ircs	Passthrough	994
ircu	Passthrough	531, 6660-6665, 6667-6669
msnp	Passthrough	1863, 6891-6900
sametime	Passthrough	1533
talk	Passthrough	517
xmpp-client	Passthrough	5222
xmpp-server	Passthrough	5269
Yahoo-Messenger	Passthrough	5000, 5001, 5050, 5100
Name Services
DNS	Passthrough	53
isns	Passthrough	3205
nameserver	Passthrough	42
netbios	Passthrough	137
svrloc	Passthrough	427
WINS (monitored)	Passthrough	1512
Other
Basic-TCP-services	Passthrough	1-19
BGP	Passthrough	179
corba-iiop-ssl	Passthrough	684
epmap (monitored)	TFO, EPM accelerator	135
msmq	LZ+TFO+DRE	1801, 2101, 2103, 2105
NTP	Passthrough	123
Other-Secure	Passthrough	261, 448, 695, 994, 2252, 2478, 2479, 2482, 2484, 2679, 2762, 2998, 3077, 3078, 3183, 3191, 3220, 3410, 3424, 3471, 3496, 3509, 3529, 3539, 3660, 3661, 3747, 3864, 3885, 3896, 3897, 3995, 4031, 5007, 7674, 9802, 12109
ssc-agent	LZ+TFO+DRE	2847, 2848, 2967, 2968, 38037, 38292
Unclassified	LZ+TFO+DRE
P2P (monitored)
BitTorrent	Passthrough	6881-6889, 6969
eDonkey	Passthrough	4661, 4662
Gnutella	Passthrough	5634, 6346-6349, 6355
Grouper	Passthrough	8038
HotLine	Passthrough	5500-5503
Kazaa	Passthrough	1214
Laplink-ShareDirect	Passthrough	2705
Napster	Passthrough	6666, 6677, 6688, 6700, 7777, 8875
Qnext	Passthrough	44, 5555
SoulSeek	Passthrough	2234, 5534
WASTE	Passthrough	1337
WinMX	Passthrough	6699
Printing (monitored)
hp-pdl-datastr	LZ+TFO+DRE	9100
IPP	LZ+TFO+DRE	631
printer	LZ+TFO+DRE	515
print-srv	LZ+TFO+DRE	170
xprint-server	LZ+TFO+DRE	8100
Remote-Desktop (monitored)
Altiris-CarbonCopy	Passthrough	1680
citrixadmin	LZ+TFO+ DRE-unidirectional	2513
citrixima	LZ+TFO+ DRE-unidirectional	2512
citriximaclient (monitored)	LZ+TFO+DRE	2598
ControlIT	TFO	799
Danware-NetOp	TFO	6502
ica (monitored)	LZ+TFO+DRE	1494
laplink	LZ+TFO+ DRE-unidirectional	1547
Laplink-surfup-HTTPS	TFO	1184
ms-wbt-server (monitored)	TFO	3389
net-assistant	Passthrough	3283
netrjs-3	TFO	73
pcanywheredata	TFO	5631, 5632, 65301
radmin-port	TFO	4899
Remote-Anything (monitored)	TFO	3999, 4000
timbuktu	TFO	407
timbuktu-srv	TFO	1417-1420
Vmware-VMConsole	TFO	902
VNC (monitored)	TFO	5800-5809, 5900-5909
x11	TFO	6000-6063
Replication (monitored)
Double-Take	LZ+TFO+ DRE-unidirectional	1100, 1105
EMC-Celerra-Replicator	LZ+TFO+ DRE-adaptive	8888
MS-AD-Replication1	LZ+TFO+DRE	UUID:e3514235-4b06-11d1-ab04-00c04fc2dcd2
ms-content-repl-srv	TFO	507, 560
MS-FRS1	LZ+TFO+DRE	UUID:f5cc59b4-4264-101a-8c59-08002b2f8426
netapp-snapmirror	LZ+TFO+ DRE-adaptive	10565-10569
pcsync-http	LZ+TFO+DRE	8444
pcsync-https	TFO	8443
rrac	TFO	5678
Rsync (monitored)	LZ+TFO+ DRE-unidirectional	873
SQL (monitored)
gds_db	LZ+TFO+DRE	3050
IBM-DB2	LZ+TFO+DRE	523
intersys-cache	LZ+TFO+DRE	1972
ms-olap4	TFO	2383
ms-sql-m	LZ+TFO+DRE	1434
MS-SQL-RPC1	LZ+TFO+DRE	UUID:3f99b900-4d87-101b-99b7-aa0004007f07
ms-sql-s (monitored)	LZ+TFO+DRE	1433
MySQL	LZ+TFO+DRE	3306
Oracle	LZ+TFO+DRE	66
orasrv	LZ+TFO+DRE	1521, 1525
Pervasive-SQL	LZ+TFO+DRE	1583
PostgreSQL	LZ+TFO+DRE	5432
sqlexec	LZ+TFO+DRE	9088, 9089
sql-net	LZ+TFO+DRE	150
sqlserv	LZ+TFO+DRE	118
sqlsrv	LZ+TFO+DRE	156
ssql	LZ+TFO+DRE	3352
sybase-sqlany	LZ+TFO+DRE	1498, 2439, 2638, 3968
UniSQL	LZ+TFO+DRE	1978, 1979
SSH
SSH (monitored)	TFO	22
SSL (monitored)
HTTPS (monitored)	TFO	443
Storage (monitored)
EMC-SRDFA-IP	LZ+TFO+DRE	1748
FCIP	LZ+TFO	3225
iFCP	LZ+TFO+DRE	3420
iscsi	LZ+TFO+DRE	3260
Streaming (monitored)
Liquid-Audio	LZ+TFO+ DRE-unidirectional	18888
ms-streaming (monitored)	LZ+TFO+ DRE-unidirectional	1755
RTSP (monitored)	LZ+TFO+ DRE-unidirectional+Video accelerator	554, 8554
Systems-Management (monitored)
BMC-Patrol	Passthrough	6161, 6162, 6767, 6768, 8160, 8161, 10128
eTrust-policy-Compliance	TFO	1267
flowmonitor	LZ+TFO	7878
HP-OpenView	Passthrough	7426-7431, 7501, 7510
LANDesk	LZ+TFO+DRE	9535, 9593-9595
NetIQ	Passthrough	2220, 2735, 10113-10116
Netopia-netOctopus	Passthrough	1917, 1921
netviewdm	Passthrough	729-731
novadigm	LZ+TFO+DRE	3460, 3461, 3464
novell-zen	LZ+TFO+DRE	1761-1763, 2037, 2544, 8039
objcall	LZ+TFO+DRE	94, 627, 1965, 1580, 1581
WBEM	Passthrough	5987-5990
Version-Management (monitored)
Clearcase	LZ+TFO+DRE	371
cvspserver	LZ+TFO+DRE	2401
VPN
L2TP	TFO	1701
OpenVPN	TFO	1194
PPTP	TFO	1723
Web (monitored)
HTTP (monitored)	LZ+TFO+DRE+ HTTP accelerator	80, 3128, 8000, 8080, 8088
soap-http	LZ+TFO+ DRE-adaptive	7627

1 These classifiers use the EPM service in WAAS to accelerate traffic. EPM-based applications do not have predefined ports so the application's UUID must be used to identify the traffic. 2 These classifiers identify the source port instead of the destination port.