Cisco ASA 5500 Series VPN Firewall OS Version 8.3(1) and ASDM 6.3(1) 正式發佈

idolclub · 发表于 2010-3-11 20:45

本帖最后由 idolclub 于 2010-3-12 16:23 编辑

Cisco已於3月10日為旗下ASA 5500系列(Adaptive Security Appliance)推出新版OS ASA 8.3(1)和ASDM 6.3(1)，本版新增或改進功能非常多，包括SSL VPN正式支持Windows 7 32-bit和64-bit、Internet Explorer 8.x and Firefox 3.x，重新設計的防火牆(Firewall)NAT功能等，詳細Release Notes for ASA 8.3(1)如下：

http://www.cisco.com/en/US/docs/security/asa/asa83/release/notes/asarn83.html

Release Notes for Cisco ASDM 6.3(1)
http://www.cisco.com/en/US/docs/security/asa/asa83/asdm63/release/notes/asdmrn63.html

因本版改動頗大，所以對RAM的需求亦大增，多款現有的ASA Firewall都必須增加RAM後才可順利安裝及咝蠥SA 8.3，以下是安裝ASA 8.3的最低RAM需求：

ba1688 · 发表于 2010-3-18 00:45

I大的好物真多，连CISCO ASA也有

wmc916 · 发表于 2010-3-18 00:47

学习学习

wintel32 · 发表于 2010-3-24 01:31

有内部解拆图吗?

garou · 发表于 2010-3-24 14:27

我们用watchgard的产品，貌似功能比思科的多不少～

wintel32 · 发表于 2010-3-30 23:09

我们用watchgard的产品，貌似功能比思科的多不少～
garou 发表于 2010-3-24 14:27

watchgard的产品相比思科有那些优点?

南京小钱 · 发表于 2010-4-1 18:02

asa就是一xx，p4为基础的x86架构，ssl vpn feature还做得暴烂
不是因为便宜，且和catalyst一起卖，再加上品牌号召力，鬼才买

jForce · 发表于 2010-4-1 18:44

不敢刷呀
业务都在跑呢
ASA作为我们出口防火墙 ASA5550

南京小钱 · 发表于 2010-4-1 23:26

楼上的，先查查自己的ASA能不能满足用8.3的内存需求
先把新的rom上传到flash里面，不一定要立刻重启，以后找机会重启的时候指定新的rom为boot system就可以了

Teardrop · 发表于 2010-4-2 19:51

我们用的是5510，ram不够啊。。。。。。。
ps ：LZ有相关QOS的参考资料吗？

idolclub · 发表于 2010-4-9 03:13

我们用的是5510，ram不够啊。。。。。。。
ps ：LZ有相关QOS的参考资料吗？
Teardrop 发表于 2010-4-2 19:51

ASA 5510使用的只是普通Memory，自己安裝也很簡單

ASA QoS的資料在Cisco ASA User Guide有詳細介紹

Teardrop · 发表于 2010-4-12 02:38

回复 11# idolclub

谢谢帮忙。

idolclub · 发表于 2010-4-16 23:05

Cisco ASA 8.3.1(1) Interim Release

Revision: Version 8.3.1(1) - 04/12/2010
Files: asa831-1-k8.bin, asa831-1-smp-k8.bin
Defects resolved since 8.3.1:

CSCsw85251 dhcp-network-scope ip that matches interface can cause route deletion
CSCsz48653 WARNING: The vlan id entered is not currently configured under any int
CSCsz62566 ASA 8.0(4) traceback in Dispatch Unit due to stack corruption
CSCta02877 Traceback in unicorn thread (outway_buffer_i)
CSCtb10530 Remove "sysopt nat-convert enable | start" support for broadview/main
CSCtb23281 ASA: SIP inspect not opening pinhole for contact header of SIP 183 msg
CSCtb36994 tcp-intercept doesn't start 3WH to inside
CSCtc16148 SLA monitor fails to fail back when ip verify reverse is applied
CSCtc81874 Traceback: CTM message handler - L2TP and crypto reset - stack overflow
CSCtd32984 SNAP frame with MAC address learned on management-only interface is sent
CSCtd36473 IPsec: Outbound context may be deleted prematurely
CSCtd37097 AnyConnect 2.4 can't connect but both auths are successful
CSCtd53356 ASA traceback when new DHCPD commands entered
CSCtd55032 ASA running 8.0.4.32 traceback in Thread Name: Dispatch Unit
CSCtd56249 CTA does not respond for EAP from ASA 8.0.5 with NAC
CSCtd60720 Error event causes Syslog 199011 "Close on bad channel in process/fiber"
CSCtd74691 VPN session not replicate to Standby after Failover State Link failure
CSCtd86281 FTP download for files larger than 2GB doesn't work properly
CSCtd87194 ASA5580 drops outbound ESP pkt if original pkt needs to be fragmented
CSCtd94385 ASA: Unable to pass traffic through an Airlink router w DTLS enabled
CSCte05514 CA ServiceDesk hidden frame not showing
CSCte08753 Fails to export Local CA Cert after rebooting ASA
CSCte11340 ASA SSL/TLS client sends TLSv1 handshake record in SSLv3 compat mode
CSCte15462 Disable URL entry should only disable http/https
CSCte25727 ASA unable to assign users policy when cancelling change password option
CSCte25741 ASA doesn't allow username length of <4 characters
CSCte38909 msgid in Language Localization are not synchronized
CSCte38942 SSL sockets stuck in CLOSE_WAIT status using webvpn
CSCte43903 ASA5580 traceback in thread DATAPATH-2-476, eip rt_timer_cancel_callback
CSCte57663 VPN user cannot ping to inside interface with management-access config
CSCte58070 ASA 8.2 webvpn custom login page shows Javascript error with IE
CSCte58507 AC Essentials not enabled w/ active ssl session should provide msg
CSCte65315 WebVPN user-storage does not work if user logon as DOMAINUsername
CSCte72846 OWA 2003 To, CC, BCC buttons in address book does not work with webvpn
CSCte92557 ASA HW client: deny rule for DHCP should account for remote subnets
CSCte94184 FO: "service resetoutside" exists only in standby unit after failover
CSCtf02322 ASA - Memory depleting 1% per day due to snmp-server ipsec configuration
CSCtf02712 Traceback in Dispatch Unit (Old pc 0x08180444 ebp 0xc793d980)
CSCtf13556 Slow memory leak in WebVPN related to CIFS cache
CSCtf49620 IKE not passing Cert attr to LDAP server causing Authorization failure

idolclub · 发表于 2010-4-23 10:32

我们用的是5510，ram不够啊。。。。。。。
ps ：LZ有相关QOS的参考资料吗？
Teardrop 发表于 2010-4-2 19:51

更多關於Cisco ASA QoS的使用方法，另外ASA 5510加Kingston 1GB DDR400 RAM即可：

http://www.cisco.com/en/US/docs/ ... uide/conns_qos.html

http://www.cisco.com/en/US/produ ... 86a008084de0c.shtml

nikon_d3x · 发表于 2010-4-29 20:32

想看一看CISCO ASA的内部做工如何？

idolclub · 发表于 2010-5-6 00:12

想看一看CISCO ASA的内部做工如何？
nikon_d3x 发表于 2010-4-29 20:32

就是一台小PC而已.........

nikon_d3x · 发表于 2010-5-12 00:33

就是一台小PC而已.........
idolclub 发表于 2010-5-6 00:12

很少看到Cisco的PC

idolclub · 发表于 2010-5-18 00:27

很少看到Cisco的PC
nikon_d3x 发表于 2010-5-12 00:33

那就找個時間上傳

nikon_d3x · 发表于 2010-5-24 18:40

Cisco RV042路由器如何?

wlww · 发表于 2010-5-24 18:51

瓦哇 .

帐号		自动登录	找回密码
密码			注册