Cisco Cisco ASA 5555-X Adaptive Security Appliance 發佈版本通知

IF-MIB ifAlias OID support The ASA now supports the ifAlias OID. When you browse the IF-MIB, the ifAlias OID will 

be set to the value that has been set for the interface description.

Support for Pause Frames 
for Flow Control on 
1-Gigabit Ethernet Interface

You can now enable pause (XOFF) frames for flow control on 1-Gigabit Ethernet interfaces; 
support was previously added for 10-Gigabit Ethernet interfaces in 8.2(2). 

We modified the following screens:

(Single Mode) Configuration > Device Setup > Interfaces > Add/Edit Interface > General
(Multiple Mode, System) Configuration > Interfaces > Add/Edit Interface 

Increased SSH security; the 
SSH default username is no 
longer supported

Starting in 8.4(2), you can no longer connect to the ASA using SSH with the pix or asa  
username and the login password. To use SSH, you must configure AAA authentication using 
the aaa authentication ssh console LOCAL command (CLI) or Configuration > Device 
Management > Users/AAA > AAA Access > Authentication (ASDM); then define a local user 
by entering the username command (CLI) or choosing Configuration > Device Management 
> Users/AAA > User Accounts (ASDM). If you want to use a AAA server for authentication 
instead of the local database, we recommend also configuring local authentication as a backup 
method.

ASA-Tandberg 
Interoperability with H.323 
Inspection

H.323 Inspection now supports uni-directional signaling for two-way video sessions. This 
enhancement allows H.323 Inspection of one-way video conferences supported by Tandberg 
video phones. Supporting uni-directional signaling allows Tandberg phones to switch video 
modes (close their side of an H.263 video session and reopen the session using H.264, the 
compression standard for high-definition video). 

We did not modify any screens.

Timeout for connections 
using a backup static route

When multiple static routes exist to a network with different metrics, the ASA uses the one with 
the best metric at the time of connection creation. If a better route becomes available, then this 
timeout lets connections be closed so a connection can be reestablished to use the better route. 
The default is 0 (the connection never times out). To take advantage of this feature, change the 
timeout to a new value.

We modified the following screen: Configuration > Firewall > Advanced > Global Timeouts.