Cisco ASA 5505 User Manual

Page 86

Advertising
background image

1-16

Cisco ASA 5500 Series Configuration Guide using the CLI

Chapter 1 Introduction to the Cisco ASA 5500 Series

New Features

Released: May 23, 2011

Table 1-6

lists the new features for ASA Version 8.2(5).

IF-MIB ifAlias OID support The ASA now supports the ifAlias OID. When you browse the IF-MIB, the ifAlias OID will

be set to the value that has been set for the interface description.

Also available in Version 8.2(5).

Interface Features

Support for Pause Frames
for Flow Control on
1-Gigabit Ethernet Interface

You can now enable pause (XOFF) frames for flow control on 1-Gigabit Ethernet interfaces;
support was previously added for 10-Gigabit Ethernet interfaces in 8.2(2).

Also available in Version 8.2(5).

Management Features

Increased SSH security; the
SSH default username is no
longer supported

Starting in 8.4(2), you can no longer connect to the ASA using SSH with the pix or asa
username and the login password. To use SSH, you must configure AAA authentication using
the aaa authentication ssh console LOCAL command (CLI) or Configuration > Device
Management > Users/AAA > AAA Access > Authentication (ASDM); then define a local user
by entering the username command (CLI) or choosing Configuration > Device Management
> Users/AAA > User Accounts (ASDM). If you want to use a AAA server for authentication
instead of the local database, we recommend also configuring local authentication as a backup
method.

Unified Communications Features

ASA-Tandberg
Interoperability with H.323
Inspection

H.323 Inspection now supports uni-directional signaling for two-way video sessions. This
enhancement allows H.323 Inspection of one-way video conferences supported by Tandberg
video phones. Supporting uni-directional signaling allows Tandberg phones to switch video
modes (close their side of an H.263 video session and reopen the session using H.264, the
compression standard for high-definition video).

Also available in Version 8.2(5).

Routing Features

Timeout for connections
using a backup static route

When multiple static routes exist to a network with different metrics, the ASA uses the one with
the best metric at the time of connection creation. If a better route becomes available, then this
timeout lets connections be closed so a connection can be reestablished to use the better route.
The default is 0 (the connection never times out). To take advantage of this feature, change the
timeout to a new value.

Also available in Version 8.2(5).

Table 1-5

New Features for ASA Version 8.4(2) (continued)

Feature

Description

Table 1-6

New Features for ASA Version 8.2(5)

Feature

Description

Monitoring Features

Smart Call-Home
Anonymous Reporting

Customers can now help to improve the ASA platform by enabling Anonymous Reporting, which
allows Cisco to securely receive minimal error and health information from the device.

Also available in Version 8.4(2).

Advertising