Properties Tab on ASDM
The tab consists of 14 sections, each with a specific feature that can be configured. Some of
these sections include the following:
■ AAA Setup—Configures AAA server groups. The Security Appliance can provide AAA
servers and the authentication prompt. Each AAA server group directs different types of
traffic to the authentication servers in its group. If the first authentication server listed in
the group fails, the Security Appliance seeks authentication from the next server in the
group. You can have up to 14 groups, and each group can have up to 14 AAA servers,
for a total of up to 196 AAA servers.
■ Advanced—Configures advanced protection features including antispoofing, fragment
options, and connection settings through the Advances window.
■ ARP Static Table—Normally, MAC addresses as learned dynamically over the inside-out
outside interfaces. The ARP Static Table gives the security administrator the option of
adding static MAC address entries on the Security Appliance.
■ Auto Update—Enables the Auto Update server to push configuration information and
send requests for information to the Security Appliance. Additionally, by causing the
Security Appliance to periodically poll the Auto Update server, the Auto Updater can pull
configuration information.
Security Appliance Requirements to Run ASDM 479
■ DHCP Server—Provides network configuration parameters, such as IP addresses, to
DHCP clients. DHCP server or DHCP proxy relay services are provided by the Security
Appliance to DHCP clients attached to Security Appliance interfaces.
■ DNS Client—Specifies one or more DNS servers for the Security Appliance so it can
resolve server names to IP addresses.
■ Failover—The settings for configuring failover on the Security Appliance.
■ History Metrics—The ASDM can display history graphs and tables to allow the security
administrator a means to track various statistics. This window allows you to configure
the Security Appliance to keep a history of various statistics. Statistics can only be
monitored in real time if this feature is not enabled.
■ HTTP/HTTPS—Displays information on HTTP redirection and HTTPS user certificate
requirements for each interface on the Security Appliance.
■ IP Audit—Provides basic IPS functionality.
■ Logging—Enables or disables sending informational messages to the console, to a syslog
server, or to an Simple Network Management Protocol (SNMP) management station.
■ priority-queue—Priority queuing features enable QoS options on packet flows passing
through the Security Appliance. To create a priority queue for an interface, use this
window. All administrator-created priority queues will be enabled before priority
queuing takes effect