Get to know Cisco ASDM 6.x's new features: Startup Wizard and firewall dashboard

[LEFT][CODE]http://blogs.techrepublic.com.com/networking/?p=309&tag=rbxccnbtr1[/CODE]Last month, I told you how to update the software on the Adaptive Security Appliance (ASA), Cisco’s latest and greatest firewall (”[URL="http://blogs.techrepublic.com.com/networking/?p=294"]Five steps to upgrading the software on a Cisco ASA 5510[/URL]“). In that article, I briefly mentioned the ASA’s GUI management interface, the Adaptive Security Device Manager (ASDM). This week, let’s take a closer look at the latest version of the interface — ASDM 6.x — and see what it has to offer.

[B]What does ASDM 6.x have to offer?[/B]

It’s always a good idea to read the release notes whenever a vendor releases a new version of software. When reading the [URL="http://www.cisco.com/univercd/cc/td/doc/product/netsec/secmgmt/asdm/v_6_0/asdmrn.htm"]ASDM version 6.x release notes[/URL], I noticed a few significant improvements as well as some important information. For example, ASDM 6.x only works with ASA software version 8.x, so upgrade your ASA software before upgrading your ASDM software.
Here’s what else stood out:

[LIST][*]Redesigned interface and expanded help[*]Visual Policy Editor[*]Firewall dashboard[*]More complex configuration support[*]Device list[*]SSL VPN Configuration Wizard[*]Startup Wizard enhancements[*]ASDM Assistant voice configuration options[*]Packet Capture Wizard[/LIST]
Let’s take a closer look at two of these improvements: ASDM Startup Wizard and the firewall dashboard.
[B]Startup Wizard[/B]

To access the ASDM, point your Web browser to:
[URL]https://x.x.x.x/admin[/URL]
where [I]x.x.x.x[/I] is the IP address of the ASA.
This should take you to the Cisco ASDM 6.0 opening page, as shown in [B]Figure A[/B].
[B]Figure A[/B]

[IMG]http://i.i.com.com/cnwk.1d/i/tr/Eve/figs08092007/Cisco1.png[/IMG]
Click the Run Startup Wizard button to launch the wizard, as shown in [B]Figure B[/B].
[B]Figure B[/B]

[IMG]http://i.i.com.com/cnwk.1d/i/tr/Eve/figs08092007/Cisco2.png[/IMG]
The Startup Wizard is a very user-friendly guide that walks you through performing the initial configuration of ASA. Using it, you can configure the hostname, domain name, enable password, Auto Update, interface IP addressing, static routing, DHCP servers for inside clients, NAT and PAT, and administrative access. [B]Figure C[/B], [B]Figure D[/B], [B]Figure E[/B], [B]Figure F[/B], and [B]Figure G[/B] offer sample screenshots from this wizard.
[B]Figure C[/B]

[IMG]http://i.i.com.com/cnwk.1d/i/tr/Eve/figs08092007/Cisco3.png[/IMG]
[B]Figure D[/B]

[IMG]http://i.i.com.com/cnwk.1d/i/tr/Eve/figs08092007/Cisco4.png[/IMG]
[B]Figure E[/B]

[IMG]http://i.i.com.com/cnwk.1d/i/tr/Eve/figs08092007/Cisco5.png[/IMG]
[B]Figure F[/B]

[IMG]http://i.i.com.com/cnwk.1d/i/tr/Eve/figs08092007/Cisco6.png[/IMG]
[B]Figure G[/B]

[IMG]http://i.i.com.com/cnwk.1d/i/tr/Eve/figs08092007/Cisco7.png[/IMG]
[B]Firewall dashboard[/B]

Another new feature that ASDM 6.x boasts is the firewall dashboard. This is one of the two dashboards available from the Home menu of the ASDM interface. [B]Figure H[/B] offers a sample screenshot.
[B]Figure H[/B]

[IMG]http://i.i.com.com/cnwk.1d/i/tr/Eve/figs08092007/Cisco8.png[/IMG]


This dashboard is a great place to see the current status of your firewall connections, dropped packets, possible attacks, and what traffic is flowing in and out of the ASA. In my opinion, this is something that all firewalls need, so I’m thankful to see it on the ASA.
The PIX PDM and the ASA ASDM have always had the “device dashboard,” which shows CPU/RAM and some traffic stats. However, as these are firewalls, they really needed a firewall-oriented dashboard.
[B]Summary[/B]

I’m very impressed with the new features offered by ASDM 6.x. There’s a ton of new SSL VPN features and wizards, and the GUI is very user-friendly.
I think the Startup Wizard will be a great way for new users to begin using ASA, and it will make the box seem less intimidating than Cisco firewalls have been in the past. Good work, Cisco
[/LEFT]