PB526545  ASA5545-BOT-1YR

Cisco® ASA Software Release 8.2 offers a wealth of features that help organizations protect their networks against new threats securely connect, communicate, and conduct business; and flexibly extend security to various deployments. This release is supported across the entire Cisco ASA 5500 Series, from the ASA 5505 to ASA 5580.
New Features
Firewall features: ASA5545-BOT-1YR
• Botnet Traffic Filter: The proliferation of spyware, malware, and botnets, as well as user participation in Web 2.0 applications such as Facebook and MySpace, are increasing the demand for multiple levels of endpoint protection. The Cisco ASA Botnet Traffic Filter complements existing content security solutions by monitoring network ports for rogue activity and by detecting infected internal endpoints and bots sending command and control traffic back to a host on the Internet. ASA5545-BOT-1YR The command and control domains and hosts associated with botnets and malware distribution are accurately and reliably identified using a dynamic database managed by the Cisco Security Intelligence Operations center. An annual license enables the Botnet Traffic Filter functionality and updates to the database. ASA5545-BOT-1YR
• Multicast group Network Address Translation (NAT): Multicast applications include distance learning, telemedicine, and financial applications. The multicast group NAT feature enables the separation of internal multicast streams from external multicast streams for added security. ASA5545-BOT-1YR
• H.239 support: The Cisco ASA H.323 inspection engine now supports H.239, which defines rules and messages to establish an additional channel that can be used to show video. This feature enables Cisco ASA appliances to inspect H.329 signaling from video endpoints.
• Unified Communications Proxy on the Cisco ASA 5580: This feature extends Cisco ASA Unified Communications Proxy features-Phone Proxy, Mobility Proxy, Presence Federation Proxy, and Transport Layer Security (TLS) Proxy-to the Cisco ASA 5580. This increases the maximum capacity of the Unified Communications Proxy solution to 10,000 sessions for TLS Proxy, Mobility Proxy, and Presence Federation Proxy, and to 5000 sessions for Phone Proxy. ASA5545-BOT-1YR
• ASA Phone Proxy media termination address for multiple interfaces The Phone Proxy requires a media termination address to terminate media from remote phones. For customers with security policies that prevent external routes on the internal network, this feature delivers the ability to configure the media termination address for multiple interfaces, eliminating the need to deploy a NAT device between the internal network and the Phone Proxy. ASA5545-BOT-1YR
• Transparent firewall mode support for IPv6 addressing: Cisco ASA Software Release 8.2 flexibly extends the support of IPv6 addressing in transparent firewall mode to enable quick ASA deployments into existing IPv6 networks without requiring IP readdressing.
• 250 VLANs on the Cisco ASA 5580: The number of virtual interfaces available on the Cisco ASA 5580 has increased from 50 to 250.
• TCP state bypass: With Cisco ASA Software Release 8.2, business can selectively disable firewall TCP inspection on ASA appliances. This is useful for allowing certain traffic to flow through in asymmetric routing scenarios when two ASA appliances are in different locations that are not adjacent to Layer 2. ASA5545-BOT-1YR
• IPv6 support for AIP SSM modules: The Cisco ASA now supports IPv6 capabilities on the Cisco ASA AIP SSM modules. Customers can send IPv6 packets from the ASA to the AIP SSM modules for both IPv6 and IPv4 IPS inspection. Minimum IPS software required is Cisco IPS software version 6.2. ASA5545-BOT-1YR