Cisco Cisco ASA 5512-X Adaptive Security Appliance - No Payload Encryption 데이터 시트

Product Bulletin

Page 1 of 2

Cisco ASA 5500 Series Adaptive Security Appliance 8.2
Software Release

PB526545

Cisco

ASA Software Release 8.2 offers a wealth of features that help organizations protect their

networks against new threats securely connect, communicate, and conduct business; and flexibly

extend security to various deployments. This release is supported across the entire Cisco ASA

5500 Series, from the ASA 5505 to ASA 5580.

New Features

Firewall features:

●

Botnet Traffic Filter: The proliferation of spyware, malware, and botnets, as well as user

participation in Web 2.0 applications such as Facebook and MySpace, are increasing the

demand for multiple levels of endpoint protection. The Cisco ASA Botnet Traffic Filter

complements existing content security solutions by monitoring network ports for rogue

activity and by detecting infected internal endpoints and bots sending command and control

traffic back to a host on the Internet. The command and control domains and hosts

associated with botnets and malware distribution are accurately and reliably identified using

a dynamic database managed by the Cisco Security Intelligence Operations center. An

annual license enables the Botnet Traffic Filter functionality and updates to the database.

●

Multicast group Network Address Translation (NAT): Multicast applications include

distance learning, telemedicine, and financial applications. The multicast group NAT feature

enables the separation of internal multicast streams from external multicast streams for

added security.

●

H.239 support: The Cisco ASA H.323 inspection engine now supports H.239, which

defines rules and messages to establish an additional channel that can be used to show

video. This feature enables Cisco ASA appliances to inspect H.329 signaling from

video endpoints.

●

Unified Communications Proxy on the Cisco ASA 5580: This feature extends Cisco ASA

Unified Communications Proxy features—Phone Proxy, Mobility Proxy, Presence

Federation Proxy, and Transport Layer Security (TLS) Proxy—to the Cisco ASA 5580. This

increases the maximum capacity of the Unified Communications Proxy solution to 10,000

sessions for TLS Proxy, Mobility Proxy, and Presence Federation Proxy, and to 5000

sessions for Phone Proxy.

●

ASA Phone Proxy media termination address for multiple interfaces The Phone Proxy

requires a media termination address to terminate media from remote phones. For

customers with security policies that prevent external routes on the internal network, this

feature delivers the ability to configure the media termination address for multiple

interfaces, eliminating the need to deploy a NAT device between the internal network and

the Phone Proxy.