1-9
Cisco ASA Series CLI Configuration Guide
Chapter 1 Introduction to the Cisco ASA
New Features
Cisco Cloud Web Security (ScanSafe) Cisco Cloud Web Security provides content scanning and other malware
protection service for web traffic. It can also redirect and report about web
traffic based on user identity.
Note Clientless SSL VPN is not supported with Cloud Web Security; be sure
to exempt any clientless SSL VPN traffic from the ASA service policy
for Cloud Web Security.
We introduced or modified the following commands: class-map type inspect
scansafe, default user group, http[s] (parameters), inspect scansafe, license,
match user group, policy-map type inspect scansafe, retry-count, scansafe,
scansafe general-options, server {primary | backup}, show conn scansafe,
show scansafe server, show scansafe statistics, user-identity monitor,
whitelist.
We introduced or modified the following screens:
Configuration > Device Management > Cloud Web Security
Configuration > Firewall > Objects > Class Maps > Cloud Web Security
Configuration > Firewall > Objects > Class Maps > Cloud Web Security >
Add/Edit
Configuration > Firewall > Objects > Inspect Maps > Cloud Web Security
Configuration > Firewall > Objects > Inspect Maps > Cloud Web Security >
Add/Edit
Configuration > Firewall > Objects > Inspect Maps > Cloud Web Security >
Add/Edit > Manage Cloud Web Security Class Maps
Configuration > Firewall > Identity Options
Configuration > Firewall > Service Policy Rules
Monitoring > Properties > Cloud Web Security
Extended ACL and object enhancement to
filter ICMP traffic by ICMP code
ICMP traffic can now be permitted/denied based on ICMP code.
We introduced or modified the following commands: access-list extended,
service-object, service.
We introduced or modified the following screens:
Configuration > Firewall > Objects > Service Objects/Groups
Configuration > Firewall > Access Rule
Unified communications support on the
ASASM
The ASASM now supports all Unified Communications features.
NAT support for reverse DNS lookups NAT now supports translation of the DNS PTR record for reverse DNS lookups
when using IPv4 NAT, IPv6 NAT, and NAT64 with DNS inspection enabled for
the NAT rule.
Table 1-5 New Features for ASA Version 9.0(1)/ASDM Version 7.0(1) (continued)
Feature Description
To Next Page
Loading...
