Cisco PIX-515-RPS - PIX 515-R - Firewall Manual de usuario descargar pdf (Pagina 15)

Cisco PIX Security Appliance Release Notes Version 7.2

OL-10104-01

New Features

Resource Management for Security Contexts

If you find that one or more contexts use too many resources, and they cause other contexts to be denied

connections, for example, then you can configure resource management to limit the use of resources per

context.

For more information, see the “Configuring Resource Management”

section in the Cisco Security

Appliance Command Line Configuration Guide.

Authentication for Through Traffic and Management Access Supports All Servers Previously

Supported for VPN Clients

All server types can be used for firewall authentication with the following exceptions: HTTP Form

protocol supports single sign-on authentication for WebVPN users only and SDI is not supported for

HTTP administrative access.

For more information, see the “Summary of Support”

section in the Cisco Security Appliance Command

Line Configuration Guide.

Auto Update

The security appliance can now be configured as an Auto Update server in addition to being configured as an

Auto Update client. The existing client-update command (which is also used to update VPN clients) is

enhanced to support the new Auto Update server functionality, and includes new keywords and arguments

that the security appliance needs to update security appliances configured as clients. For the security

appliance configured as an Auto Update client, the auto-update command continues to be the command used

to configure the parameters that the security appliance needs to communicate with the Auto Update server.

For more information, see the “Configuring Auto Update Support” section in the Cisco Security

Appliance Command Line Configuration Guide. For a complete description of the command syntax, see

the Cisco Security Appliance Command Reference.

Dead Connection Detection (DCD)

This feature allows the security appliance to automatically detect and expire dead connections. In

previous versions, dead connections never timed out; they were given an infinite timeout. Manual

intervention was required to ensure that the number of dead connections did not overwhelm the security

appliance. With this feature, dead connections are detected and expired automatically, without

interfering with connections that can still handle traffic. The set connection timeout and show

service-policy commands provide DCD support.

For more information, see the “Configuring Connection Limits and Timeouts” section in the Cisco

Security Appliance Command Line Configuration Guide. For a complete description of the command

syntax, see the Cisco Security Appliance Command Reference.

Configurable Prompt

With this feature, the user can see the failover status of the security appliance without having to enter

the show failover command and parse the output. This feature allows users to see the chassis slot number

of the failover unit. Previously, the prompt reflected just the hostname, security context, and

configuration mode. The prompt command provides support for this feature.

1 2 ... 10 11 12 13 14 15 16 17 18 19 20 ... 27 28

Comentarios a estos manuales

Sin comentarios

Cisco PIX-515-RPS - PIX 515-R - Firewall Manual de usuario Pagina 15

Comentarios a estos manuales

Relacionado con productos y manuales para Los Sistemas De Control De Acceso De Seguridad Cisco PIX-515-RPS - PIX 515-R - Firewall