Cisco Cisco ASA 5525-X Adaptive Security Appliance - No Payload Encryption Hoja De Datos
Product Bulletin
© 2009 Cisco Systems, Inc. All rights reserved. This document is Cisco Public Information.
Page 1 of 2
Cisco ASA 5500 Series Adaptive Security Appliance 8.2
Software Release
Software Release
PB526545
Cisco
®
ASA Software Release 8.2 offers a wealth of features that help organizations protect their
networks against new threats securely connect, communicate, and conduct business; and flexibly
extend security to various deployments. This release is supported across the entire Cisco ASA
5500 Series, from the ASA 5505 to ASA 5580.
New Features
Firewall features:
●
Botnet Traffic Filter: The proliferation of spyware, malware, and botnets, as well as user
participation in Web 2.0 applications such as Facebook and MySpace, are increasing the
demand for multiple levels of endpoint protection. The Cisco ASA Botnet Traffic Filter
complements existing content security solutions by monitoring network ports for rogue
activity and by detecting infected internal endpoints and bots sending command and control
traffic back to a host on the Internet. The command and control domains and hosts
associated with botnets and malware distribution are accurately and reliably identified using
a dynamic database managed by the Cisco Security Intelligence Operations center. An
annual license enables the Botnet Traffic Filter functionality and updates to the database.
●
Multicast group Network Address Translation (NAT): Multicast applications include
distance learning, telemedicine, and financial applications. The multicast group NAT feature
enables the separation of internal multicast streams from external multicast streams for
added security.
●
H.239 support: The Cisco ASA H.323 inspection engine now supports H.239, which
defines rules and messages to establish an additional channel that can be used to show
video. This feature enables Cisco ASA appliances to inspect H.329 signaling from
video endpoints.
●
Unified Communications Proxy on the Cisco ASA 5580: This feature extends Cisco ASA
Unified Communications Proxy features—Phone Proxy, Mobility Proxy, Presence
Federation Proxy, and Transport Layer Security (TLS) Proxy—to the Cisco ASA 5580. This
increases the maximum capacity of the Unified Communications Proxy solution to 10,000
sessions for TLS Proxy, Mobility Proxy, and Presence Federation Proxy, and to 5000
sessions for Phone Proxy.
●
ASA Phone Proxy media termination address for multiple interfaces The Phone Proxy
requires a media termination address to terminate media from remote phones. For
customers with security policies that prevent external routes on the internal network, this
feature delivers the ability to configure the media termination address for multiple
interfaces, eliminating the need to deploy a NAT device between the internal network and
the Phone Proxy.