Cisco ASA 5585-X Cli Configuration Guide

1-25
Cisco ASA Series CLI Configuration Guide
Appendix 1 Configuring an External Server for Authorization and Authentication
Configuring an External LDAP Server
Figure 1-11 Login Denied Message for AnyConnect Client User
Enforcing Logon Hours and Time-of-Day Rules
The following example shows how to configure and enforce the hours that a clientless SSL user (such as
a business partner) is allowed to access the network.
On the AD server, use the Office field to enter the name of the partner, which uses the
physicalDeliveryOfficeName attribute. Then we create an attribute map on the ASA to map that attribute
to the Cisco attribute Access-Hours. During authentication, the ASA retrieves the value of
physicalDeliveryOfficeName and maps it to Access-Hours.
To configure the user attributes on the AD /LDAP server, perform the following steps:
Step 1 Select the user, and right-click Properties.
The Properties dialog box appears (see Figure 1-12).
Step 2 Click the General tab.

Cisco ASA 5585-X Specifications

General

Firewall Throughput	up to 20 Gbps
Maximum VPN Peers	10, 000
IPS Throughput	up to 10 Gbps
Maximum Concurrent Connections	10, 000, 000
Security Contexts	250
Interfaces	8 x 10 Gigabit Ethernet
Connections Per Second	350, 000
Power Supply	Dual, hot-swappable