Cisco 5510 - ASA SSL / IPsec VPN Edition User Manual

1-19
Cisco ASA Series CLI Configuration Guide
Chapter 1 Introduction to the Cisco ASA
New Features
Unified ACL for IPv4 and IPv6 ACLs now support IPv4 and IPv6 addresses. You can also specify a mix of
IPv4 and IPv6 addresses for the source and destination. The IPv6-specific
ACLs are deprecated. Existing IPv6 ACLs are migrated to extended ACLs.
ACLs containing IPv6 addresses can be applied to clients configured to use the
SSL protocol. This feature is not supported for the IKEv2/IPsec protocol.
We modified the following commands: access-list extended, access-list
webtype.
We removed the following commands: ipv6 access-list, ipv6 access-list
webtype, ipv6-vpn-filter.
We modified the following screens:
Configuration > Firewall > Access Rules
Configuration > Remote Access VPN > Network (Client) Access > Group
Policies > General > More Options
Mixed IPv4 and IPv6 object groups Previously, network object groups could only contain all IPv4 addresses or all
IPv6 addresses. Now network object groups can support a mix of both IPv4 and
IPv6 addresses.
Note You cannot use a mixed object group for NAT.
We modified the following command: object-group network.
We modified the following screen: Configuration > Firewall > Objects >
Network Objects/Groups.
Range of IPv6 addresses for a Network
object
You can now configure a range of IPv6 addresses for a network object.
We modified the following command: range.
We modified the following screen: Configuration > Firewall > Objects >
Network Objects/Groups.
Inspection support for IPv6 and NAT64 We now support DNS inspection for IPv6 traffic.
We also support translating between IPv4 and IPv6 for the following
inspections:
• DNS
• FTP
• HTTP
• ICMP
You can now also configure the service policy to generate a syslog message
(767001) when unsupported inspections receive and drop IPv6 traffic.
We modified the following command: service-policy fail-close.
We modified the following screen: Configuration > Firewall > Service Policy
Rules > Add Service Policy Rule Wizard - Service Policy.
Remote Access Features
Table 1-5 New Features for ASA Version 9.0(1)/ASDM Version 7.0(1) (continued)
Feature Description

Cisco 5510 - ASA SSL / IPsec VPN Edition Specifications

General

Brand	Cisco
Model	5510 - ASA SSL / IPsec VPN Edition
Category	Firewall
Language	English