Cisco ASA の概要

1 CHAPTER 1-1 Cisco ASA CLI 1 Cisco ASA Cisco ASA VPN 1 IPS ASA 1 2 3 IPsec VPN SSL VPN SSL VPN P. 1 - 1 VPN P. 1 - 1 P. 1 - 2 ASA P. 1 - 2 P. 1 - 4 VPN P. 1 - 9 ASA Cisco ASA Compatibility URL Supported VPN Platforms, Cisco ASA 5500 Series 1-2 Cisco ASA CLI 1 Cisco ASA ASA (1) P.

2 1 - 2 syslog syslog ASA (1) 1-1 ASA (1) ( ) (5) (1) (1) ASA Cisco IOS Catalyst 6500 Cisco 7600 MSFC ASASM Catalyst OS ASA 1-1 ASA (1) ASA 5512-X ASA 5555-X ASA CX SSP ASA 5512-X ASA 5515-X ASA 5525-X ASA 5545-X ASA 5555-X ASA CX SSP ASA CX ASA Cisco SSD SSD ASA 5500-X session cxsc show module cxsc sw-module cxsc 1-3 Cisco ASA CLI 1 Cisco ASA ASA MSFC MSFC MSFC 1 VLAN MSFC

3 1-1 VLAN 1-1 ASASM VLAN 201 1-1 ASASM VLAN 200 MSFC VLAN 201 301 302 303 ASASM ASASM VLAN 201 202 203 1-1 MSFC/Router ASASMASASMASASM MSFC/RouterASASM Э MSFC/RouterMSFC/Router VLAN 200 VLAN 201 VLAN 302 VLAN 303 VLAN 301 DMZ HRMSFC/RouterVLAN 200 VLAN 100 VLAN 201 VLAN 202 VLAN 203 DMZ HR 1-4 Cisco ASA CLI 1 Cisco ASA ASASM 1 1-2 1-2 MSFC/Router We b FTP Demiliterized Zone DMZ.

4 DMZ DMZ URL DMZ ASA DMZ A B CVLAN 203 VLAN 202 VLAN 201 VLAN 100 VLAN 200 VLAN 300 VLAN 303 VLAN 302 VLAN 301 MSFC/Router A B C 1-5 Cisco ASA CLI 1 Cisco ASA P.

5 1 - 5 P. 1 - 8 P. 1 - 8 ASA P. 1 - 5 NAT P. 1 - 5 IP P. 1 - 6 AAA P. 1 - 6 HTTP HTTPS FTP P. 1 - 6 P. 1 - 6 IPS P. 1 - 6 P. 1 - 6 QoS P. 1 - 7 TCP P.

6 1 - 7 P. 1 - 7 P. 1 - 7 Cisco Unified Communications P. 1 - 7 IP EtherType NAT NAT NAT NAT IP IP 1-6 Cisco ASA CLI 1 Cisco ASA IP ASA IP ICMP ASA IP

7 AAA HTTP ASA RADIUS TACACS+ HTTP HTTPS FTP We b FTP We b ASA We b s e n s e E n t e r p r i s e Secure Computing SmartFilter IP ASA IPS IPS IPS Device Manager IPS CSC SSM FTP HTTP POP3 SMTP CSC SSM ASA 1-7 Cisco ASA CLI 1 Cisco ASA

8 QoS QoS QoS TCP TCP UDP DoS ASA TCP TCP SYN DoS TCP TCP DoS IP 1 1 IPS ASA TCP IPID ASA IP

9 IP syslog Cisco Unified Communications Cisco ASA 5500 1-8 Cisco ASA CLI 1 Cisco ASA ASA 2 ASA ASA Bump In The Wire ASA EtherType ASA TCP

10 TCP State Bypass section on page 19-3 ASA ASA