Cisco PIX-515-RPS - PIX 515-R - Firewall Manual de usuario descargar pdf (Pagina 17)

Cisco PIX Security Appliance Release Notes Version 7.2

OL-10104-01

Important Notes

The packet-tracer command provides detailed information about the packets and how they are

processed by the security appliance. If a command from the configuration did not cause the packet to

drop, the packet-tracer command will provide information about the cause.

For more information, see the “Packet Tracer” section in the Cisco Security Appliance Command Line

Configuration Guide. For a complete description of the command syntax, see the Cisco Security

Appliance Command Reference.

WCCP

The Web Cache Communication Protocol (WCCP) feature allows you to specify WCCP service groups

and redirect web cache traffic. The feature transparently redirects selected types of traffic to a group of

web cache engines to optimize resource usage and lower response times.

IPv6 Security Enforcement of IPv6 Addresses

This feature allows you to configure the security appliance to require that IPv6 addresses for directly

connected hosts use the Modified EUI-64 format for the interface identifier portion of the address.

For more information, see the “Configuring IPv6” chapter in the Cisco Security Appliance Command Line

Configuration Guide.

Inspection IPS, CSC and URL Filtering for WebVPN

This feature adds support for inspection, IPS, and Trend Micro for WebVPN traffic in clientless mode

and port forwarding mode. Support for SVC mode is preexisting. In all of the modes, the Trend Micro

and the IPS engines will be triggered (if configured).

URL/FTP/HTTPS/Java/Activex filtering using WebSense and N2H2 support has also been added. DNS

inspect will be triggered for the DNS requests.

In port forwarding mode, HTTP, SMTP, FTP, and DNS inspections with the filtering mechanisms using

WebSense and N2H2 support has been added.

For more information, see the “Configuring WebVPN” chapter in the Cisco Security Appliance

Command Line Configuration Guide. For a complete description of the command syntax, see the Cisco

Security Appliance Command Reference.

Important Notes

This section lists important notes related to Version 7.2(1).

HTTP(S) Authentication Challenge Improvement

In versions prior to 7.2(1), the security appliance authenticated HTTP network connections using basic

HTTP authentication and authenticated HTTPS connections by generating similar custom login

windows. In 7.2(1), HTTP and HTTPS connections are redirected to a set of authentication pages that

are served directly by the security appliance. After successful authentication, the browser is again

redirected to the originally-intended URL. When AAA is configured, these pages are available at:

1 2 ... 12 13 14 15 16 17 18 19 20 21 22 ... 27 28

Sin comentarios

Cisco PIX-515-RPS - PIX 515-R - Firewall Manual de usuario Pagina 17