Managing SQL*Net Traffic via a Class Map
Pixfirewall(config)# class-map sqlnet_port
Pixfirewall(config-cmap)# match port tcp eq 1521
Pixfirewall(config-cmap)# exit
Pixfirewall(config)# policy-map dmz_map
Pixfirewall(config-pmap)# class sqlnet_port
Pixfirewall(config-pmap-c)# inspect sqlnet
Pixfirewall(config-pmap-c)# exit
NOTE If you are running an IANA-compliant SQL*Net database, you must inspect port
66 instead of port 1521.