Cisco ASA 5505 Configuration Manual page 1384

Mapping Certificates to IPsec or SSL VPN Connection Profiles
Add/Edit Certificate Matching Rule
Use the Add/Edit Certificate Matching Rule dialog box to assign the name of a list (map) to a
connection profile.
Fields
•
•
•
If you do not assign a rule criterion to the map, as described in the next section, the adaptive security
appliance ignores the map entry.
Modes
The following table shows the modes in which this feature is available:
Cisco ASA 5500 Series Configuration Guide using ASDM
64-74
Map—Choose one of the following:
Existing—Select the name of the map to include the rule.
–
New—Enter a new map name for a rule.
–
Rule Priority—Type a decimal to specify the sequence with which the adaptive security appliance
evaluates the map when it receives a connection request. For the first rule defined, the default
priority is 10. The adaptive security appliance evaluates each connection against the map with the
lowest priority number first.
Mapped to Connection Profile—Select the connection profile, formerly called a "tunnel group,"
to map to this rule.
Chapter 64 General VPN Setup
OL-20339-01