Cisco Systems Add/Edit Certificate Matching Rule Criterion

69-80
Cisco ASA 5500 Series Configuration Guide using ASDM
Chapter69 General VPN Setup
Mapping Certificates to IPsec or SSL VPN Connection Profiles
•Rule Priority—Type a decimal to specify the sequence with which the ASA evaluates the map when
it receives a connection request. For the first rule defined, the default priority is 10. TheASA
evaluates each connection against the map with the lowest priority number first.
•Mapped to Connection Profile—Select the connection profile, formerly called a “tunnel group,”
to map to this rule.
If you do not assign a rule criterion to the map, as described in the next section, the ASA ignores the
map entry.
Modes
The following table shows the modes in which this feature is available:
Add/Edit Certificate Matching Rule Criterion
Use the Add/Edit Certificate Matching Rule Criterion dialog box to configure a certificate matching
rule criterion for the selected connection profile.
Fields
•Rule Priority—(Display only). Sequence with which the ASA evaluates the map when it receives
a connection request. The ASA evaluates each connection against the map with the lowest priority
number first.
Firewall Mode Security Context
Routed Transparent Single
Multiple
Context System
•—•——