Cisco Cisco ASA for Nexus 1000V Series Switch

Table 1

 lists the new features for ASA interim Version 8.5(1.6).

We recommend that you upgrade to a Cisco.com-posted ASA interim release only if you have a specific 
problem that it resolves. If you decide to run an interim release in a production environment, keep in 
mind that only targeted testing is performed on interim releases. Interim releases are fully supported by 
Cisco TAC and will usually remain on the download site only until the next maintenance release is 
available. If you choose to run an interim release, we strongly encourage you to upgrade to a fully-tested 
maintenance or feature release when it becomes available.

We will document interim release features at the time of the next maintenance or feature release. For a 
list of resolved caveats for each ASA interim release, see the interim release notes available on the 
Cisco.com software download site.

Configure the connection 
replication rate during a bulk 
sync

You can now configure the rate at which the ASA replicates connections to the standby unit 
when using stateful failover. By default, connections are replicated to the standby unit during 
a 15 second period. However, when a bulk sync occurs (for example, when you first enable 
failover), 15 seconds may not be long enough to sync large numbers of connections due to a 
limit on the maximum connections per second. For example, the maximum connections on the 
ASA is 8 million; replicating 8 million connections in 15 seconds means creating 533K 
connections per second. However, the maximum connections allowed per second is 300K. You 
can now specify the rate of replication to be less than or equal to the maximum connections per 
second, and the sync period will be adjusted until all the connections are synced.

We introduced the following command: failover replication rate rate.