Table Of Contents

New Features

Advanced Firewall Services

Voice over IP and Mutlimedia Security Services

Robust IPSec VPN Services

Resilient Architecture

Intelligent Networking Services

Flexible Management Solutions

New Features

---

This chapter includes an at-a-glance look at the new features. For more information on these features in PIX Security appliance Version 7.0 and their accompanying CLI commands, see the following documents:

•Cisco PIX Security Appliance Command Reference, Version 7.0

•Cisco Security Appliance CLI Configuration Guide, Version 7.0

•Cisco ASA 5500 Series Release Notes

•Adaptive Security Device Manager Online Help (previously known as PIX Device Manager, or PDM)

The PIX Security appliance Version 7.0 introduces the following new features:

Advanced Firewall Services

•Cisco Modular Policy Framework

•Advanced Web Security Services

•Tunneling Application Control

•Security Contexts

•Layer 2 Transparent Firewall

•FTP Session Command Filtering

•Extended Simple Mail Transport

•Protocol (ESMTP) Email Inspection Services

•3G Mobile Wireless Security Services

•Sun RPC/NIS+ Inspection Services

•Internet Control Message Protocol (ICMP) Inspection Services

•Enhanced TCP Security Engine

•Outbound Access Control Lists (ACLs)

•Time-based ACLs

•Enable/Disable Individual ACL Entries

•Improved Websence URL Filtering Performance

Voice over IP and Mutlimedia Security Services

•T.38 Fax over IP (FoIP)

•Gatekeeper Routed Control Signaling (GKRCS)

•Fragmented and Segmented Multimedia Stream Inspection

•MGCP Address Translation Services

•RTSP Address Translation Services

Robust IPSec VPN Services

•VPN Client Security Posture Enforcement

•VPN Client Blocking by Operating System and Type

•Automatic VPN Client Software Updates

•Improved Support for Non-Split Tunneling Remote Access VPN Environments

•Enhanced VPN NAT Transparency

•Native Integration with Popular User Authentication Services

•OSPF Dynamic Routing over VPN Tunnels

•Enhanced Spoke-to-Spoke VPN Support

•Enhanced X.509 Certificate Support

•Cisco IOS Software Certificate Authority Support

Resilient Architecture

•Active/Active Stateful Failover

•VPN Stateful Failover

•Improved Failover Transition Times

•Zero-Downtime Software Upgrades

Intelligent Networking Services

•PIM Multicast Routing

•QoS Services

•IPv6 Networking

•Common Security Level for Multiple Interfaces

•Improved VLAN Capacity

•Optional Address Translation Services

Flexible Management Solutions

•Improved SNMP Monitoring

•SSHv2 and Secure Copy Protocol (SCP)

•Storage of Multiple Configurations in Flash Memory

•Secure Asset Recovery

•Scheduled System Reloads

•Dedicated Out-of-Band Management Interface

•Enhanced ICMP Ping Services

•Command Line Interface (CLI) Usability Enhancements

•SMTP Email Alerts

•Administrative TACACS+ Accounting

•RADIUS Accounting to Multiple Servers