Table Of Contents
Support Information for Cisco Security Appliances
Cisco Adaptive Security Appliance 5550 Series
Cisco ASA 5550 Series—Supported Software Versions
Cisco ASA 5550 Series—Supported Topologies
Cisco ASA 5550 Series—Supported Modules
Cisco ASA 5550 Series—Supported Technologies
Cisco ASA 5550 Series—Supported Service Events
Cisco Adaptive Security Appliance 5580 Series
Cisco ASA 5580 Series—Supported Software Versions
Cisco ASA 5580 Series—Supported Topologies
Cisco ASA 5580 Series—Supported Modules
Cisco ASA 5580 Series—Supported Technologies
Cisco ASA 5580 Series—Supported Service Events
Supported Technologies on Cisco Security Appliances
IP
Ethernet (IEEE 802.3)
Physical Equipment
Base Logical Components
Common
Support Information for Cisco Security Appliances
This chapter contains support information for Virtual Network Elements (VNEs) that manage Cisco security appliances in Cisco ANA Version 3.7. For more information about the objects and attributes described in this chapter, see Part 2, Technology Support and Information Objects.
This chapter contains the following topics:
•
Cisco Adaptive Security Appliance 5550 Series
•Cisco Adaptive Security Appliance 5580 Series
•Supported Technologies on Cisco Security Appliances
Cisco Adaptive Security Appliance 5550 Series
This section includes the following information about Cisco ASA 5550 Series security appliances (for information on the NE types supported in Cisco ANA Version 3.7, see Cisco Adaptive Security Appliance 5550 Series):
•Cisco ASA 5550 Series—Supported Software Versions
•Cisco ASA 5550 Series—Supported Topologies
•Cisco ASA 5550 Series—Supported Modules
•Cisco ASA 5550 Series—Supported Technologies
•Cisco ASA 5550 Series—Supported Service Events
Cisco ASA 5550 Series—Supported Software Versions
Table 3-1 Supported Software Versions for Cisco ASA 5550 Series—Cisco ANA Version 3.7
|
|
|
7.2(3)12
|
3.6.3
|
Cisco ASA 5550 Series—Supported Topologies
Table 3-2 Supported Topologies for Cisco ASA 5550 Series—Cisco ANA Version 3.7
Topology Type
|
Link Type
|
|
Ethernet
|
Ethernet
|
3.6.3
|
Cisco ASA 5550 Series—Supported Modules
Table 3-3 Supported Modules for Cisco ASA 5550 Series—Cisco ANA Version 3.7
Module Name
|
|
Module Description
|
SSM-4GE-INC
|
3.6.3
|
SSM-4GE Included with ASA 5550 System
|
Cisco ASA 5550 Series—Supported Technologies
The following technologies are supported by the Cisco ASA 5550 Series in Cisco ANA Version 3.7:
•IP
•Ethernet (IEEE 802.3)
•Physical Equipment
•Base Logical Components
•Common
Cisco ASA 5550 Series—Supported Service Events
Table 3-4 Supported Service Events for Cisco ASA 5550 Series—Cisco ANA Version 3.7
Event Name
|
|
|
Primary HSRP Interface Active/Inactive
|
3.6.0
|
Y
|
All IP Interfaces Down / Active IP Interfaces Found
|
3.6.3
|
Y
|
Interface Status Down/Up
|
3.6.3
|
Y
|
Card In/Out
|
3.6.3
|
Y
|
Link Down/Up
|
3.6.3
|
Y
|
Device Unreachable
|
3.6.3
|
Y
|
CPU Over Utilized
|
3.6.3
|
Y
|
Memory Over Utilized
|
3.6.3
|
Y
|
Device Unsupported
|
3.6.3
|
Y
|
Discard Packets
|
3.6.3
|
N
|
Dropped Packets
|
3.6.3
|
N
|
Module Unsupported
|
3.6.3
|
N
|
Port Down
|
3.6.3
|
Y
|
Card Up/Down
|
3.6.3
|
Y
|
Cisco Adaptive Security Appliance 5580 Series
This section includes the following information about Cisco ASA 5580 Series security appliances (for information on the NE types supported in Cisco ANA Version 3.7, see Cisco Adaptive Security Appliance 5580 Series):
•Cisco ASA 5580 Series—Supported Software Versions
•Cisco ASA 5580 Series—Supported Topologies
•Cisco ASA 5580 Series—Supported Modules
•Cisco ASA 5580 Series—Supported Technologies
•Cisco ASA 5580 Series—Supported Service Events
Cisco ASA 5580 Series—Supported Software Versions
Table 3-5 Supported Software Versions for Cisco ASA 5580 Series—Cisco ANA Version 3.7
|
|
|
8.1(2)
|
3.7
|
8.1(2)12
|
3.7
|
Cisco ASA 5580 Series—Supported Topologies
Table 3-6 Supported Topologies for Cisco ASA 5580 Series—Cisco ANA Version 3.7
Topology Type
|
Link Type
|
|
Ethernet
|
Ethernet
|
3.7
|
Cisco ASA 5580 Series—Supported Modules
Table 3-7 Supported Modules for Cisco ASA 5580 Series—Cisco ANA Version 3.7
Module Name
|
|
Module Description
|
ASA5580-4GE-CU
|
3.7
|
Cisco ASA 5580 4-port 10/100/1000 Ethernet interface card, RJ45
|
ASA5580-4GE-FI
|
3.7
|
Cisco ASA 5580 4-port Gigabit Ethernet fiber interface card, SR, LC
|
ASA5580-2X10GE-SR
|
3.7
|
Cisco ASA 5580 2-port 10 Gigabit Ethernet fiber interface card, SR, LC
|
Cisco ASA 5580 Series—Supported Technologies
The following technologies are supported by the Cisco ASA 5580 Series in Cisco ANA Version 3.7:
•IP
•Ethernet (IEEE 802.3)
•Physical Equipment
•Base Logical Components
•Common
Cisco ASA 5580 Series—Supported Service Events
Table 3-8 Supported Service Events for Cisco ASA 5580 Series—Cisco ANA Version 3.7
Event Name
|
|
|
Primary HSRP Interface Active/Inactive
|
3.7
|
Y
|
All IP Interfaces Down / Active IP Interfaces Found
|
3.7
|
Y
|
Interface Status Down/Up
|
3.7
|
Y
|
Card In/Out
|
3.7
|
Y
|
Link Down/Up
|
3.7
|
Y
|
Device Unreachable
|
3.7
|
Y
|
CPU Over Utilized
|
3.7
|
Y
|
Memory Over Utilized
|
3.7
|
Y
|
Device Unsupported
|
3.7
|
Y
|
Discard Packets
|
3.7
|
N
|
Dropped Packets
|
3.7
|
N
|
Module Unsupported
|
3.7
|
N
|
Port Down
|
3.7
|
Y
|
Card Up/Down
|
3.7
|
Y
|
Supported Technologies on Cisco Security Appliances
The following sections list the objects and attributes that are supported on Cisco security appliances in Cisco ANA Version 3.7 per technology:
•IP
•Ethernet (IEEE 802.3)
•Physical Equipment
•Base Logical Components
•Common
IP
Table 3-9 IP Attribute Support on Cisco Security Appliances—Cisco ANA Version 3.7
Attribute
|
|
|
IMO Name—IIPInterface
|
IP Address
|
Y
|
Y
|
Subnetwork Mask
|
Y
|
Y
|
IP Interface Addresses Array
|
Y
|
Y
|
Interface Name
|
Y
|
Y
|
Interface Description
|
Y
|
Y
|
IP Interface State
|
Y
|
Y
|
OSPF Interface Cost
|
|
|
Broadcast Address
|
|
|
MTU
|
|
|
Lookup Method
|
|
|
Address Resolution Type
|
|
|
ARP Timeout
|
|
|
Secured ARP
|
|
|
ICMP Mask Reply
|
|
|
IGMP Proxy
|
|
|
HSRP Groups
|
|
|
IP Multiplexing Table
|
|
|
IANA Type
|
|
|
Containing CTPs
|
|
|
Contained CTPs
|
|
|
IMO Name—IIPMuxEntry
|
Termination Point
|
|
|
Destination IP Subnet
|
|
|
IMO Name—IRoutingEntity
|
Routing Table
|
Y
|
Y
|
ARP Entity
|
Y
|
Y
|
Routing Table Changes
|
|
|
Name
|
Y
|
Y
|
Logical Sons
|
Y
|
Y
|
IMO Name—IRoutingEntry
|
Destination IP Subnet
|
Y
|
Y
|
Next Hop IP Address
|
Y
|
Y
|
Type
|
Y
|
Y
|
Routing Protocol Type
|
Y
|
Y
|
Outgoing Interface Name
|
Y
|
Y
|
IMO Name—IARPEntity
|
ARP Table
|
Y
|
Y
|
IMO Name—IARPEntry
|
IP Address
|
Y
|
Y
|
MAC Address
|
Y
|
Y
|
Port
|
Y
|
Y
|
Entry Type
|
Y
|
Y
|
IMO Name—IIPPool
|
IP Address Pool Entries
|
|
|
Name
|
|
|
Index
|
|
|
IMO Name—IIPRangeBasedIPPoolEntry
|
Start IP Address
|
|
|
End IP Address
|
|
|
Unused Addresses
|
|
|
Used Addresses
|
|
|
Reserved Addresses
|
|
|
IMO Name—IIPSubnetBasedIPPoolEntry
|
IP Subnet
|
|
|
Unused Addresses
|
|
|
Used Addresses
|
|
|
Reserved Addresses
|
|
|
IMO Name—HSRPGroupEntry
|
Group Number
|
|
|
Port Description
|
|
|
Priority
|
|
|
Coupled Router
|
|
|
State
|
|
|
Tracking Interfaces
|
|
|
Virtual IP Address
|
|
|
Virtual MAC Address
|
|
|
IMO Name—ITunnelGRE
|
Name
|
|
|
Tunnel Destination and Source
|
|
|
IP Address
|
|
|
IP Interface State
|
|
|
IANA Type
|
|
|
Containing CTPs
|
|
|
Contained CTPs
|
|
|
Keep Alive Time
|
|
|
Keep Alive Retry
|
|
|
Ethernet (IEEE 802.3)
Table 3-10 Ethernet (IEEE 802.3) Attribute Support on Cisco Security Appliances—Cisco ANA Version 3.7
Attribute
|
|
|
IMO Name—ILinkAggregationGroup802dot3ad
|
dot3adAggMACAddress
|
|
|
dot3adAggActorSystemPriority
|
|
|
dot3adAggActorSystemID
|
|
|
dot3adAggActorAdminKey
|
|
|
dot3adAggActorOperKey
|
|
|
dot3adAggPartnerSystemID
|
|
|
dot3adAggPartnerSystemPriority
|
|
|
dot3adAggPartnerOperKey
|
|
|
dot3adAggCollectorMaxDelay
|
|
|
GroupNumber
|
|
|
AggregationProtocolType
|
|
|
MacAddress
|
|
|
ChannelAdminStatus
|
|
|
ChannelOperStatus
|
|
|
IMO Name—IEthernet
|
MAC Address
|
Y
|
Y
|
Duplex Mode
|
|
|
Output Flow Control
|
|
|
Input Flow Control
|
|
|
IANA Type
|
Y
|
Y
|
Containing CTPs
|
|
|
Contained CTPs
|
|
|
Port Type
|
|
|
IMO Name—IVlanInterface
|
Mode
|
|
|
Native VLAN Identification
|
|
|
Virtual LAN Table
|
|
|
IANA Type
|
|
|
Containing CTPs
|
|
|
Contained CTPs
|
|
|
vlanAdminType
|
|
|
vlanencapType
|
|
|
getAccess
|
|
|
Allowed Vlans
|
|
|
IMO Name—IVlanEncapMux
|
IANA Type
|
|
|
Containing CTPs
|
|
|
Contained CTPs
|
|
|
IMO Name—IVlanMapping
|
direction
|
|
|
vlanMatchCriteria
|
|
|
vlanRewriteDefinition
|
|
|
Drop
|
|
|
Vlan
|
|
|
innerVlan
|
|
|
translatedVlan
|
|
|
translatedInnerVlan
|
|
|
IMO Name—IIEEE802
|
VLAN Identification
|
|
|
Binding Information
|
|
|
Binding Status
|
|
|
IANA Type
|
|
|
Containing CTPs
|
|
|
Contained CTPs
|
|
|
IMO Name—IStpService
|
StpProtocol
|
|
|
StpMaxAge
|
|
|
StpHelloTime
|
|
|
StpBridgeForwardDelay
|
|
|
StpInstanceInfoTable
|
|
|
Same as ISystemService
|
|
|
StpUplinkFastState
|
|
|
StpBackboneFastState
|
|
|
StpForwardDelay
|
|
|
StpBridgeMaxAge
|
|
|
StpBridgeHelloTime
|
|
|
IMO Name—IMstService
|
MstProperties
|
|
|
Same as IStpService
|
|
|
IMO Name—IPvstpService
|
UpLinkFast
|
|
|
BackboneFast
|
|
|
IMO Name—IMstProperties
|
MstForceVersion
|
|
|
MstCfgIdFmtSel
|
|
|
MstExternalRootCost
|
|
|
MstMaxInstances
|
|
|
MstCfgIdName
|
|
|
MstCfgIdRevLevel
|
|
|
IMO Name—IStpInstanceInfo
|
Object Identification
|
|
|
StpBridgeId
|
|
|
BridgePriority
|
|
|
Designated Parent and Root Bridges
|
|
|
StpRootCost
|
|
|
IsRoot
|
|
|
StpRootPort
|
|
|
StpPortInfoTable
|
|
|
STP Instance Id
|
|
|
Vlan Id
|
|
|
StpDesignatedBridge
|
|
|
StpDesignatedRoot
|
|
|
IMO Name—IMstInstanceInfo
|
MstVlanIds
|
|
|
Same as IStpInstanceInfo
|
|
|
IMO Name—IPvstpInstanceInfo
|
Protocol Type
|
|
|
StpBridgeMaxAge
|
|
|
StpBridgeHelloTime
|
|
|
StpBridgeForwardDelay
|
|
|
StpProtocolSpecification
|
|
|
StpVlanId
|
|
|
StpForwardDelay
|
|
|
StpMaxAge
|
|
|
IMO Name—IRstpInstanceInfo
|
StpForceVersion
|
|
|
Same as IStpInstanceInfo
|
|
|
IMO Name—IStpPortInfo
|
StpPort
|
|
|
StpPortPriority
|
|
|
StpPortState
|
|
|
StpPortPathCost
|
|
|
StpPortEdgePort
|
|
|
StpPortPointToPoint
|
|
|
StpPortRole
|
|
|
StpDesignatedPortIdentifier
|
|
|
StpDesignatedBridge
|
|
|
StpPortIdentifier
|
|
|
StpPortBpduGuardState
|
|
|
StpPortBpduFilterState
|
|
|
IMO Name—IMstPortInfo
|
MstPortHelloTime
|
|
|
Same as IStpPortInfo
|
|
|
IMO Name—IPvstpPortInfo
|
PvstpPortFastState
|
|
|
IMO Name—IEthernetChannel
|
Group Number
|
|
|
Bandwidth
|
|
|
Aggregation Protocol
|
|
|
IANA Type
|
|
|
Containing CTPs
|
|
|
Contained CTPs
|
|
|
Mac Address
|
|
|
Admin Status
|
|
|
Oper Status
|
|
|
Physical Equipment
Table 3-11 Physical Equipment Attribute Support on Cisco Security Appliances—Cisco ANA Version 3.7
Attribute
|
|
|
IMO Name—IChassis
|
Description
|
|
Y
|
Equipment Holder Type
|
Y
|
Y
|
Contained Equipment Holders
|
|
|
Contained Equipments
|
|
|
Serial Number
|
|
Y
|
IMO Name—IShelf
|
Description
|
|
|
Status
|
|
|
Equipment Holder Type
|
|
|
Contained Equipment Holders
|
|
|
Contained Equipments
|
|
|
Serial Number
|
|
|
IMO Name—IModule
|
Module Name
|
Y
|
Y
|
Module Description
|
Y
|
Y
|
Software Version
|
Y
|
Y
|
Operational Status
|
Y
|
|
Hardware Type + Version
|
Y
|
Y
|
Managed IP Address
|
|
|
Redundant Equipment
|
|
|
Configured Redundancy
|
|
|
Redundancy Status
|
|
|
Operational Status Last Changed
|
|
|
Supported Physical Termination Points
|
|
|
Serial Number (soft property)
|
Y
|
Y
|
Slots Number
|
|
|
Base Logical Components
Table 3-12 Base Logical Components Attribute Support on Cisco Security Appliances—Cisco ANA Version 3.7
Attribute
|
|
|
IMO Name—IManagedElement
|
IP Address
|
Y
|
Y
|
Communication State
|
Y
|
Y
|
Investigation State
|
Y
|
Y
|
Element Category
|
Y
|
Y
|
Element Type and Key
|
Y
|
Y
|
Device Name
|
Y
|
Y
|
System Name
|
Y
|
Y
|
System Description
|
Y
|
Y
|
Up Time
|
Y
|
Y
|
Software Version
|
Y
|
Y
|
Vendor Identity
|
Y
|
Y
|
Memory and CPU Usage
|
Y
|
Y
|
DRAM Free
|
|
|
DRAM Used
|
|
|
Flash Device Size
|
Y
|
|
NVRAM Size
|
Y
|
|
Processor DRAM
|
|
|
Sys Contact
|
Y
|
Y
|
Sys Location
|
Y
|
Y
|
Serial Number
|
Y
|
Y
|
File Systems
|
|
|
IMO Name—IContext
|
Name
|
|
|
Bounded Connections
|
|
|
IP Address Pools
|
|
|
Forwarding Components List
|
|
|
Traffic Descriptors List
|
|
|
Tunnel Containers List
|
|
|
Data Link Aggregation Containers List
|
|
|
IMO Name—ISystemService
|
Type
|
|
|
Status
|
|
|
Up Time
|
Y
|
Y
|
Common
Table 3-13 Common Attribute Support on Cisco Security Appliances—Cisco ANA Version 3.7
Attribute
|
|
|
IMO Name—IPhysicalLayer
|
Media Type
|
Y
|
Y
|
Clocking Source
|
|
|
Maximum Speed
|
Y
|
Y
|
Is Internal Port
|
Y
|
Y
|
Discarded Bandwidth
|
|
|
Dropped Bandwidth
|
|
|
Input Bandwidth
|
|
|
Output Bandwidth
|
|
|
Discarded and Received Input Data Counters
|
|
|
Dropped and Forward Output Data Counters
|
|
|
Administrative Status
|
Y
|
Y
|
Operational Status
|
Y
|
Y
|
Last Changed
|
|
|
IANA Type
|
Y
|
Y
|
Containing CTPs
|
|
|
Contained CTPs
|
|
|
Port Alias
|
Y
|
Y
|
Location
|
Y
|
Y
|
Sending Alarms
|
Y
|
Y
|
Connector Description
|
Y
|
|
Part ID
|
Y
|
|
Connector Serial Num
|
Y
|
|
Product
|
Y
|
Y
|
Status
|
Y
|
Y
|
Managed
|
Y
|
Y
|
IMO Name—IBridge
|
Bridge Table
|
|
|
Type
|
|
|
MAC Address
|
|
|
IP Interface
|
|
|
Name
|
|
|
Logical Sons
|
|
|
Vlan Type
|
|
|
IMO Name—IBridgeEntry
|
Destination MAC
|
|
|
Outgoing Interface
|
|
|
Feedback