Asav Deployment Configuration - Cisco ASA Series Getting Started

ASAv Deployment Configuration

access-list sfrAccessList extended permit ip any any
class-map sfrclass
match access-list sfrAccessList
policy-map global_policy
class sfrclass
sfr fail-open monitor-only
service-policy global_policy global
ASAv Deployment Configuration
When you deploy the ASAv, you can pre-set many parameters that let you connect to the Management 0/0
interface using ASDM. A typical configuration includes the following settings:
• Routed or Transparent firewall mode
• Management 0/0 interface:
• Static route for the management host IP address (if it is not on the management subnet)
• HTTP server enabled or disabled
• HTTP access for the management host IP address
• (Optional) Failover link IP addresses for GigabitEthernet 0/8, and the Management 0/0 standby IP
• DNS server
• Smart licensing ID token
• Smart licensing Throughput Level and Standard Feature Tier
• (Optional) Smart Call Home HTTP Proxy URL and port
• (Optional) SSH management settings:
• (Optional) REST API enabled or disabled
CLI Book 1: Cisco ASA Series General Operations CLI Configuration Guide, 9.5
22
◦Named "management"
◦ IP address or DHCP
◦ Security level 0
◦ Management-only
For the ASAv on Microsoft Azure, the Management 0/0 interface allows through traffic,
Note
so the Management-only setting is not enabled.
address
◦ Client IP addresses
◦ Local username and password
◦ Authentication required for SSH using the LOCAL database
Getting Started