Cisco ASA 5505 Configuration Manual page 66

New Features
Table 1-3
unless otherwise noted.
Table 1-3 New Features for ASDM Version 6.3(2)/ASA Version 8.3(2) (Unless Otherwise Noted)
Feature
Monitoring Features
Enhanced logging and
connection blocking
Syslog message filtering and
sorting
Clearing syslog messages
for the CSC SSM
Remote Access Features
Cisco ASA 5500 Series Configuration Guide using ASDM
1-4
lists the new features for ASDM Version 6.3(2). All features apply only to ASA Version 8.3(2),
Description
When you configure a syslog server to use TCP, and the syslog server is unavailable, the
adaptive security appliance blocks new connections that generate syslog messages until the
server becomes available again (for example, VPN, firewall, and cut-through-proxy
connections). This feature has been enhanced to also block new connections when the logging
queue on the adaptive security appliance is full; connections resume when the logging queue
is cleared.
This feature was added for compliance with Common Criteria EAL4+. Unless required, we
recommend allowing new connections when syslog messages cannot be sent. To allow new
connections, configure the syslog server to use UDP or check the Allow user traffic to pass
when TCP syslog server is down check box on the Configuration > Device Management >
Logging > Syslog Servers pane.
The following syslog messages were introduced: 414005, 414006, 414007, and 414008
No ASDM screens were modified.
Support has been added for the following:
Syslog message filtering based on multiple text strings that correspond to various columns
•
Creation of custom filters
•
Column sorting of messages. For detailed information, see the Cisco ASA 5500 Series
•
Configuration Guide using ASDM.
The following screens were modified:
Monitoring > Logging > Real-Time Log Viewer > View
Monitoring > Logging > Log Buffer Viewer > View
This feature interoperates with all ASA versions.
Support for clearing syslog messages has been added in the Latest CSC Security Events pane.
The following screen was modified: Home > Content Security.
This feature interoperates with all ASA versions.
Chapter 1 Introduction to the Cisco ASA 5500 Series Adaptive Security Appliance
OL-20339-01