Примечания к выпуску для Cisco Cisco ASA 5555-X Adaptive Security Appliance - No Payload Encryption

Скачать
Страница из 24
 
8
Release Notes for Cisco ASDM, Version 6.2(x)
OL-18973-03
  New Features
New Features in ASDM 6.2(1)/ASA 8.2(1)
Released: May 6, 2009
Hi
 lists the new features for ASA Version 8.2(1)/ASDM Version 6.2(1).
SSM Features
CSC 6.3 Support in 
ASDM
ASDM displays Web Reputation, User Group Policies, and User ID Settings in the Plus License 
listing on the main home page. CSC 6.3 security event enhancements are included, such as the new 
Web Reputation events and user and group identifications. 
Table 3
New Features for ASA Version 8.0(5)/ASDM Version 6.2(3) (continued)
Feature
Description
Table 4
New Features for ASA Version 8.2(1)/ASDM Version 6.2(1)
Feature
Description
Remote Access Features
One Time Password 
Support for ASDM 
Authentication
ASDM now supports administrator authentication using one time passwords (OTPs) supported by 
RSA SecurID (SDI). This feature addresses security concerns about administrators authenticating 
with static passwords. 
New session controls for ASDM users include the ability to limit the session time and the idle time. 
When the password used by the ASDM administrator times out, ASDM prompts the administrator 
to re-authenticate.
In ASDM, see Configuration > Device Management > Management Access > 
ASDM/HTTPD/Telnet/SSH.
Customizing Secure 
Desktop
You can use ASDM to customize the Secure Desktop windows displayed to remote users, including 
the Secure Desktop background (the lock icon) and its text color, and the dialog banners for the 
Desktop, Cache Cleaner, Keystroke Logger, and Close Secure Desktop windows. 
In ASDM, see Configuration > CSD Manager > Secure Desktop Manager.
Pre-fill Username from 
Certificate
The pre-fill username feature enables the use of a username extracted from a certificate for 
username/password authentication. With this feature enabled, the username is “pre-filled” on the 
login screen, with the user being prompted only for the password. 
The double-authentication feature is compatible with the pre-fill username feature, as the pre-fill 
username feature can support extracting a primary username and a secondary username from the 
certificate to serve as the usernames for double authentication when two usernames are required. 
In ASDM, see Configuration> Remote Access VPN > Network (Client) Access > AnyConnect or 
Clienltess SSL VPN Connection Profiles > Advanced. Settings are in the Authentication, 
Secondary Authentication, and Authorization panes.