Ask the Expert: Introduction to Cisco Adaptive Security Appliance (ASA) version 9.x (Context Aware Security and VPN Features)

[ciscomoderator]

With Namit Agarwal and Rahul Govindan 

Welcome to the Cisco Support Community Ask the Expert conversation. This is an opportunity to learn and ask questions about Cisco Adaptive Security Appliance (ASA) version 9.x (Context Aware Security and VPN Features) with experts Namit Agarwal and Rahul Govindan.

This is a continuation of the live webcast.

Cisco ASA CX (Context-Aware) is a next generation firewall service that serves as an extension to the Cisco Adaptive Security Appliance (ASA) firewall platform. In addition to the proven stateful inspection firewall capabilities, it provides us with next-generation capabilities and a host of additional network-based security controls for end-to-end network intelligence and streamlined security operations.

Namit Agarwal is a customer support engineer at the Cisco Technical Assistance Center in Bangalore, India. He has more than four years of experience in the security domain. His areas of expertise include ASA firewalls, IPS, and ASA content-aware security (ASA CX). He has been involved in various escalation requests from around the world. He holds CCIE certification (number 33795) in security.   

Rahul Govindan has been an engineer with the Security Technical Assistance Center team in Bangalore for more than three years. He works on security technologies such as VPN; Cisco ASA firewalls; and authentication, authorization, and accounting. His particular expertise is in Secure Sockets Layer VPN and IP security VPN technologies. He holds CCIE certification (number 29948) in security.

Remember to use the rating system to let Namit and Govindan know if you have received an adequate response. 

Because of the volume expected during this event, Namit and Govindan might not be able to answer every question. Remember that you can continue the conversation in the Security community, subcommunity VPN shortly after the event. This event lasts through November 1, 2013. Visit this forum often to view responses to your questions and the questions of other Cisco Support Community members.

Webcast related links:

Slides from the live webcast

Video Recording of the live webcast

Introduction to Cisco Adaptive Security Appliance (ASA) version 9.x (Context Aware Security and VPN Features): FAQ from live webcast

[John Ventura]

Hi Namit & Rahul,

Are there any issues to consider while upgrading ASA 9.x? what are the memory requirements and prerequisites?  Thanks in advance for your help.

John

[ciscomoderator]

Hello Namit and Rahul,

Here are few questions that came in directly during your live webcast hence posting them here so that users can benifit:

1)      How is ASA CX different from other UTM solutions ?

2)      How is dynamic application inspection of CX better than other inspection engines  ?

3)      What features or functionalities on the CX are available by default ?

4)      what are the different ways we can run or install CX on the ASA platform ?

5)      What VPN features are supported with multi context ASA in the 9.x release ?

6)      What are the IPv6 Enhancements in the ASA version 9.x ?

Request you to please provide your responses to them individually.

Thanks.

[vishaw jasrotia]

Hello Namit and Rahul,

How is Application visibility and control featur in ASA-X , differ from  normal inspection .

Thanks in advance for ur kind help.

Thanks

Vishaw

[Namit Agarwal]

Hi Vishaw,

Thanks for your question. The AVC offered by the CX is way more enhanced and complex in its capabilities. The AVC offers more than layer 7 inspection, it adds intelligence using the data in the layer 3/4/7 information. It recognizes a large number of applications and microapplications. Hence, it enables the administrators to control access to applications forspecific set of users or groups. Also, we can control features within a microapplication.

e.g. block one game in  facebook and allow another one

Hope that helps.

Thanks,

Namit

[luckymike33]

Hi,

I have a question related to the ASA and cloud security (scansafe), are you able to give me details on the connection limit for a 5545X when it is configured to use scanafe for websecurity? Is it the usual connection limit, ie. 750,000?

I look forward to hearig from you.

very best wishes

Mike Jackson