Document Outline

• About This Guide
• Getting Started with the ASA
  • Introduction to the Cisco ASA 5500 Series
    • Hardware and Software Compatibility
    • VPN Specifications
    • New Features
      • New Features in Version 8.6(1)
      • New Features in Version 8.4(5)
      • New Features in Version 8.4(4.1)
      • New Features in Version 8.4(3)
      • New Features in Version 8.4(2)
      • New Features in Version 8.4(1)
    • Firewall Functional Overview
      • Security Policy Overview
        • Permitting or Denying Traffic with Access Lists
        • Applying NAT
        • Protecting from IP Fragments
        • Using AAA for Through Traffic
        • Applying HTTP, HTTPS, or FTP Filtering
        • Applying Application Inspection
        • Sending Traffic to the IPS Module
        • Sending Traffic to the Content Security and Control Module
        • Applying QoS Policies
        • Applying Connection Limits and TCP Normalization
        • Enabling Threat Detection
        • Enabling the Botnet Traffic Filter
        • Configuring Cisco Unified Communications
      • Firewall Mode Overview
      • Stateful Inspection Overview
    • VPN Functional Overview
    • Security Context Overview
  • Getting Started
    • Accessing the Appliance Command-Line Interface
    • Configuring ASDM Access for Appliances
      • Accessing ASDM Using the Factory Default Configuration
      • Accessing ASDM Using a Non-Default Configuration (ASA 5505)
      • Accessing ASDM Using a Non-Default Configuration (ASA 5510 and Higher)
    • Starting ASDM
      • Connecting to ASDM for the First Time
      • Starting ASDM from the ASDM-IDM Launcher
      • Starting ASDM from the Java Web Start Application
      • Using ASDM in Demo Mode
    • Factory Default Configurations
      • Restoring the Factory Default Configuration
      • ASA 5505 Default Configuration
        • ASA 5505 Routed Mode Default Configuration
        • ASA 5505 Transparent Mode Sample Configuration
      • ASA 5510 and Higher Default Configuration
    • Working with the Configuration
      • Saving Configuration Changes
        • Saving Configuration Changes in Single Context Mode
        • Saving Configuration Changes in Multiple Context Mode
      • Copying the Startup Configuration to the Running Configuration
      • Viewing the Configuration
      • Clearing and Removing Configuration Settings
      • Creating Text Configuration Files Offline
    • Applying Configuration Changes to Connections
  • Managing Feature Licenses
    • Supported Feature Licenses Per Model
      • Licenses Per Model
      • License Notes
      • VPN License and Feature Compatibility
    • Information About Feature Licenses
      • Preinstalled License
      • Permanent License
      • Time-Based Licenses
        • Time-Based License Activation Guidelines
        • How the Time-Based License Timer Works
        • How Permanent and Time-Based Licenses Combine
        • Stacking Time-Based Licenses
        • Time-Based License Expiration
      • Shared AnyConnect Premium Licenses
        • Information About the Shared Licensing Server and Participants
        • Communication Issues Between Participant and Server
        • Information About the Shared Licensing Backup Server
        • Failover and Shared Licenses
        • Maximum Number of Participants
      • Failover Licenses (8.3(1) and Later)
        • Failover License Requirements and Exceptions
        • How Failover Licenses Combine
        • Loss of Communication Between Failover Units
        • Upgrading Failover Pairs
      • No Payload Encryption Models
      • Licenses FAQ
    • Guidelines and Limitations
    • Configuring Licenses
      • Obtaining an Activation Key
      • Activating or Deactivating Keys
      • Configuring a Shared License
        • Configuring the Shared Licensing Server
        • Configuring the Shared Licensing Backup Server (Optional)
        • Configuring the Shared Licensing Participant
    • Monitoring Licenses
      • Viewing Your Current License
      • Monitoring the Shared License
    • Feature History for Licensing
• Configuring Firewall and Security Context Modes
  • Configuring the Transparent or Routed Firewall
    • Configuring the Firewall Mode
      • Information About the Firewall Mode
        • Information About Routed Firewall Mode
        • Information About Transparent Firewall Mode
      • Licensing Requirements for the Firewall Mode
      • Default Settings
      • Guidelines and Limitations
      • Setting the Firewall Mode
      • Feature History for Firewall Mode
    • Configuring ARP Inspection for the Transparent Firewall
      • Information About ARP Inspection
      • Licensing Requirements for ARP Inspection
      • Default Settings
      • Guidelines and Limitations
      • Configuring ARP Inspection
        • Task Flow for Configuring ARP Inspection
        • Adding a Static ARP Entry
        • Enabling ARP Inspection
      • Monitoring ARP Inspection
      • Feature History for ARP Inspection
    • Customizing the MAC Address Table for the Transparent Firewall
      • Information About the MAC Address Table
      • Licensing Requirements for the MAC Address Table
      • Default Settings
      • Guidelines and Limitations
      • Configuring the MAC Address Table
        • Adding a Static MAC Address
        • Setting the MAC Address Timeout
        • Disabling MAC Address Learning
      • Monitoring the MAC Address Table
      • Feature History for the MAC Address Table
    • Firewall Mode Examples
      • How Data Moves Through the ASA in Routed Firewall Mode
        • An Inside User Visits a Web Server
        • An Outside User Visits a Web Server on the DMZ
        • An Inside User Visits a Web Server on the DMZ
        • An Outside User Attempts to Access an Inside Host
        • A DMZ User Attempts to Access an Inside Host
      • How Data Moves Through the Transparent Firewall
        • An Inside User Visits a Web Server
        • An Inside User Visits a Web Server Using NAT
        • An Outside User Visits a Web Server on the Inside Network
        • An Outside User Attempts to Access an Inside Host
  • Configuring Multiple Context Mode
    • Information About Security Contexts
      • Common Uses for Security Contexts
      • Context Configuration Files
        • Context Configurations
        • System Configuration
        • Admin Context Configuration
      • How the ASA Classifies Packets
        • Valid Classifier Criteria
        • Classification Examples
      • Cascading Security Contexts
      • Management Access to Security Contexts
        • System Administrator Access
        • Context Administrator Access
      • Information About Resource Management
        • Resource Limits
        • Default Class
        • Class Members
      • Information About MAC Addresses
        • Default MAC Address
        • Interaction with Manual MAC Addresses
        • Failover MAC Addresses
        • MAC Address Format
    • Licensing Requirements for Multiple Context Mode
    • Guidelines and Limitations
    • Default Settings
    • Configuring Multiple Contexts
      • Task Flow for Configuring Multiple Context Mode
      • Enabling or Disabling Multiple Context Mode
        • Enabling Multiple Context Mode
        • Restoring Single Context Mode
      • Configuring a Class for Resource Management
      • Configuring a Security Context
      • Automatically Assigning MAC Addresses to Context Interfaces
    • Changing Between Contexts and the System Execution Space
    • Managing Security Contexts
      • Removing a Security Context
      • Changing the Admin Context
      • Changing the Security Context URL
      • Reloading a Security Context
        • Reloading by Clearing the Configuration
        • Reloading by Removing and Re-adding the Context
    • Monitoring Security Contexts
      • Viewing Context Information
      • Viewing Resource Allocation
      • Viewing Resource Usage
      • Monitoring SYN Attacks in Contexts
      • Viewing Assigned MAC Addresses
        • Viewing MAC Addresses in the System Configuration
        • Viewing MAC Addresses Within a Context
    • Configuration Examples for Multiple Context Mode
    • Feature History for Multiple Context Mode
• Configuring Interfaces
  • Starting Interface Configuration (ASA 5510 and Higher)
    • Information About Starting ASA 5510 and Higher Interface Configuration
      • Auto-MDI/MDIX Feature
      • Interfaces in Transparent Mode
      • Management Interface
        • Management Interface Overview
        • Management Slot/Port Interface
        • Using Any Interface for Management-Only Traffic
        • Management Interface for Transparent Mode
        • No Support for Redundant Management Interfaces
        • Management 0/0 Interface on the ASA 5512-X through ASA 5555-X
      • Redundant Interfaces
        • Redundant Interface MAC Address
      • EtherChannels
        • Channel Group Interfaces
        • Connecting to an EtherChannel on Another Device
        • Link Aggregation Control Protocol
        • Load Balancing
        • EtherChannel MAC Address
    • Licensing Requirements for ASA 5510 and Higher Interfaces
    • Guidelines and Limitations
    • Default Settings
    • Starting Interface Configuration (ASA 5510 and Higher)
      • Task Flow for Starting Interface Configuration
      • Converting In-Use Interfaces to a Redundant or EtherChannel Interface
      • Enabling the Physical Interface and Configuring Ethernet Parameters
      • Configuring a Redundant Interface
        • Configuring a Redundant Interface
        • Changing the Active Interface
      • Configuring an EtherChannel
        • Adding Interfaces to the EtherChannel
        • Customizing the EtherChannel
      • Configuring VLAN Subinterfaces and 802.1Q Trunking
      • Enabling Jumbo Frame Support (Supported Models)
    • Monitoring Interfaces
    • Configuration Examples for ASA 5510 and Higher Interfaces
      • Physical Interface Parameters Example
      • Subinterface Parameters Example
      • Multiple Context Mode Example
      • EtherChannel Example
    • Where to Go Next
    • Feature History for ASA 5510 and Higher Interfaces
  • Starting Interface Configuration (ASA 5505)
    • Information About ASA 5505 Interfaces
      • Understanding ASA 5505 Ports and Interfaces
      • Maximum Active VLAN Interfaces for Your License
      • VLAN MAC Addresses
      • Power over Ethernet
      • Monitoring Traffic Using SPAN
      • Auto-MDI/MDIX Feature
    • Licensing Requirements for ASA 5505 Interfaces
    • Guidelines and Limitations
    • Default Settings
    • Starting ASA 5505 Interface Configuration
      • Task Flow for Starting Interface Configuration
      • Configuring VLAN Interfaces
      • Configuring and Enabling Switch Ports as Access Ports
      • Configuring and Enabling Switch Ports as Trunk Ports
    • Monitoring Interfaces
    • Configuration Examples for ASA 5505 Interfaces
      • Access Port Example
      • Trunk Port Example
    • Where to Go Next
    • Feature History for ASA 5505 Interfaces
  • Completing Interface Configuration (Routed Mode)
    • Information About Completing Interface Configuration in Routed Mode
      • Security Levels
      • Dual IP Stack (IPv4 and IPv6)
    • Licensing Requirements for Completing Interface Configuration in Routed Mode

    • Related manuals for 350 HC