Cisco Asdm 7 User Guide

 
Contents
19
Cisco ASA Series Firewall ASDM Configuration Guide
 
Feature History for the ASA CX Module30-33
CHAPTER 31Configuring the ASA IPS Module31-1
Information About the ASA IPS Module31-1
How the ASA IPS Module Works with the ASA31-2
Operating Modes31-3
Using Virtual Sensors (ASA 5510 and Higher)31-3
Information About Management Access31-4
Licensing Requirements for the ASA IPS module31-5
Guidelines and Limitations31-5
Default Settings31-6
Configuring the ASA IPS module31-7
Task Flow for the ASA...

 
Contents
20
Cisco ASA Series Firewall ASDM Configuration Guide
 
Connecting to the CSC SSM32-8
Determining Service Policy Rule Actions for CSC Scanning32-9
CSC SSM Setup Wizard32-10
Activation/License32-11
IP Configuration32-11
Host/Notification Settings32-12
Management Access Host/Networks32-13
Password32-13
Restoring the Default Password32-14
Wizard Setup32-15
Using the CSC SSM GUI32-20
Web32-20
Mail32-21
SMTP Tab32-21
POP3 Tab32-22
File Transfer32-22
Updates32-23
Monitoring the CSC SSM32-24...

 
3
Cisco ASA Series Firewall ASDM Configuration Guide
 
About This Guide
This preface introduces Cisco ASA Series Firewall ASDM Configuration Guide and includes the 
following sections:
•Document Objectives, page 3
Related Documentation, page 3
Conventions, page 4
Obtaining Documentation and Submitting a Service Request, page 4
Document Objectives
The purpose of this guide is to help you configure the firewall features for ASA using ASDM. This guide 
does not cover every feature, but describes only the...

 
4
Cisco ASA Series Firewall ASDM Configuration Guide
 
      
  Obtaining Documentation and Submitting a Service Request
Conventions
This document uses the following conventions:
NoteMeans reader take note.
TipMeans the following information will help you solve a problem. 
CautionMeans reader be careful. In this situation, you might perform an action that could result in equipment 
damage or loss of data.
Obtaining Documentation and Submitting a Service Request
For information on obtaining...

 
PART 1
Configuring Service Policies 

CH A P T E R
 
1-1
Cisco ASA Series Firewall ASDM Configuration Guide
 
1
Configuring a Service Policy
Service policies provide a consistent and flexible way to configure ASA features. For example, you can 
use a service policy to create a timeout configuration that is specific to a particular TCP application, as 
opposed to one that applies to all TCP applications. A service policy consists of multiple service policy 
rules applied to an interface or applied globally.
This chapter includes the following...

 
1-2
Cisco ASA Series Firewall ASDM Configuration Guide
 
Chapter 1      Configuring a Service Policy
  Information About Service Policies
Feature Directionality
Actions are applied to traffic bidirectionally or unidirectionally depending on the feature. For features 
that are applied bidirectionally, all traffic that enters or exits the interface to which you apply the policy 
map is affected if the traffic matches the class map for both directions.
Table 1-1  Service Policy Rule Features
FeatureFor...

 
1-3
Cisco ASA Series Firewall ASDM Configuration Guide
 
Chapter 1      Configuring a Service Policy
  Information About Service Policies
NoteWhen you use a global policy, all features are unidirectional; features that are normally bidirectional 
when applied to a single interface only apply to the ingress of each interface when applied globally. 
Because the policy is applied to all interfaces, the policy will be applied in both directions so 
bidirectionality in this case is redundant.
For features...

 
1-4
Cisco ASA Series Firewall ASDM Configuration Guide
 
Chapter 1      Configuring a Service Policy
  Information About Service Policies
For example, if a packet matches a rule for connection limits, and also matches a rule for an application 
inspection, then both actions are applied.
If a packet matches a rulefor HTTP inspection, but also matches another rule that includes HTTP 
inspection, then the second rule actions are not applied.
If a packet matches a rulefor HTTP inspection, but also matches...