Filter
Top Products
6-12
Cisco ASA Series Firewall CLI Configuration Guide
Chapter 6 Configuring Access Rules
Feature History for Access Rules
Unified ACL for IPv4 and IPv6 9.0(1) ACLs now support IPv4 and IPv6 addresses. You can even
specify a mix of IPv4 and IPv6 addresses for the source and
destination. The any keyword was changed to represent
IPv4 and IPv6 traffic. The any4 and any6 keywords were
added to represent IPv4-only and IPv6-only traffic,
respectively. The IPv6-specific ACLs are deprecated.
Existing IPv6 ACLs are migrated to extended ACLs. See the
release notes for more information about migration.
We modified the following commands: access-list
extended, access-list webtype.
We removed the following commands: ipv6 access-list,
ipv6 access-list webtype, ipv6-vpn-filter
Extended ACLand object enhancement to filter
ICMP traffic by ICMP code
9.0(1) ICMP traffic can now be permitted/denied based on ICMP
code.
We introduced or modified the following commands:
access-list extended, service-object, service.
Transactional Commit Model on Rule Engine
for Access groups
9.1(5) When enabled, a rule update is applied after the rule
compilation is completed; without affecting the rule
matching performance.
We introduced the following commands: asp rule-engine
transactional-commit, show running-config asp
rule-engine transactional-commit, clear configure asp
rule-engine transactional-commit.
Table 6-2 Feature History for Access Rules (continued)
Feature Name
Platform
Releases Feature Information