The following screen was modified: Remote Access VPN > Network Access > IPsec connection profiles > Add/Edit. For each DHCP server configured for VPN clients, you can now configure the adaptive security appliance to send the Subnet Selection option or the Link Selection option. This enhancement introduces adaptive security appliance support for DHCP RFCs 3011 (The IPv4 Subnet Selection Option) and 3527 (Link Selection Sub-option for the Relay Agent Information Option). The following screen was modified: Configuration > Firewall > Service Policies > Rule Actions > Connection Settings.ĭHCP RFC compatibility (rfc3011, rfc3527) to resolve routing issues The idle timeout was changed to apply to all protocols, not just TCP. Monitoring > Botnet Traffic Filter > Infected Hosts The following screens were introduced or modified:Ĭonfiguration > Firewall > Botnet Traffic Filter > Traffic Settings The 1 hour timeout for reports for top hosts was removed there is now no timeout. Reporting was enhanced to show infected hosts. You can also view the category and threat level of malware sites in statistics and reports. The Botnet Traffic Filter now supports automatic blocking of blacklisted traffic based on the threat level. (Multiple Mode, System) Configuration > Interfaces > Add/Edit Interface (Single Mode) Configuration > Device Setup > Interfaces > Add/Edit Interface > General You can now enable pause (XOFF) frames for flow control. Support for Pause Frames for Flow Control on the ASA 5580 10 Gigabit Ethernet Interfaces The following screen was modified: Configuration > Context Management > Security Contexts.
Cisco asdm 7.2 manual#
The command parser now checks if auto-generation is enabled if you want to also manually assign a MAC address, you cannot start the manual MAC address with A2.
The MAC addresess are also now persistent accross reloads. The MAC address format was changed to allow use of a prefix, to use a fixed starting value (A2), and to use a different scheme for the primary and secondary unit MAC addresses in a failover pair. In multiple context mode, auto-generated MAC addresses now use a user-configurable prefix, and other enhancements The Mobility Proxy no longer requires the UC Proxy license.
Cisco asdm 7.2 license#
Mobility Proxy application no longer requires Unified Communications Proxy license The following screen was modified: Configuration > Firewall > Objects > Inspect Maps > H.323 > Details > State Checking. The adaptive security appliance includes options to open pinholes for calls based on the RegistrationRequest/RegistrationConfirm (RRQ/RCF) messages.īecause these RRQ/RCF messages are sent to and from the Gatekeeper, the calling endpoint IP address is unknown and the adaptive security appliance opens a pinhole through source IP address/port 0/0. You can enable call setup between H.323 endpoints when the Gatekeeper is inside the network. Therefore, the adaptive security appliance allows RSVP traffic that contains packets with the Router Alert option (option 20) when the adaptive security appliance is in routed mode.Ĭonfiguration > Firewall > Objects > Inspect Maps > IP-OptionsĬonfiguration > Firewall > Service Policy > Add/Edit Service Policy Rule > Rule Actions > Protocol InspectionĮnabling Call Set up Between H.323 Endpoints Note This inspection is enabled by default. Previously, all IP options were denied by default, except for some special cases. You can also clear IP options from an IP packet, and then allow it through the adaptive security appliance. You can now control which IP packets with specific IP options should be allowed through the adaptive security appliance. The following screen was modified: Monitoring > VPN > VPN Statistics > Sessions. The sessions that have been inactive for the longest time are marked as idle (and are automatically logged off) so that license capacity is not reached and new users can log in. Scalable Solutions for Waiting-to-Resume VPN SessionsĪn administrator can now keep track of the number of users in the active state and can look at the statistics. New Features for ASA Version 8.2(2)/ASDM Version 6.2(5) Is there any reason to use ASDM 6.2(5) over 6.2(1)?
0 kommentar(er)
