Cisco Systems New Features in Version 8.4(4.1)/6.4(9)

1-5
Cisco ASA 5500 Series Configuration Guide using ASDM
Chapter1 Introduction to the Cisco ASA 5500 Series
New Features
New Features in Version 8.4(4.1)/6.4(9)
Released: June 18, 2012
Table 1 -3 lists the new features for ASA Version 8.4(4.1)/ASDM Version 6.4(9).
Note Version 8.4(4) was removed from Cisco.com due to build issues; please upgrade to Version 8.4(4.1) or
later.
Increased maximum LDAP
values per attribute
The maximum number of values that the ASA can receive for a single attribute was increased
from 1000 (the default) to 5000, with an allowed range of 500 to 5000. If a response message
is received that exceeds the configured limit, the ASA rejects the authentication. If the ASA
detects that a single attribute has more than 1000 values, then the ASA generates informational
syslog 109036. For more than 5000 attributes, the ASA generates error level syslog 109037.
We introduced the following command: ldap-max-value-range number (Enter this command
in aaa-server host configuration mode).
ASDM does not support this command; enter the command using the Command Line Tool.
Also available in Version 8.4(3).
Support for sub-range of
LDAP search results
When an LDAP search results in an attribute with a large number of values, depending on the
server configuration, it might return a sub-range of the values and expect the ASA to initiate
additional queries for the remaining value ranges. The ASA now makes multiple queries for
the remaining ranges, and combines the responses into a complete array of attribute values.
Also available in Version 8.4(3).
Troubleshooting Features
Regular expression
matching for the show asp
table classifier and show
asp table filter commands
You can now enter the show asp table classifier and show asp table filter commands with a
regular expression to filter output.
We modified the following commands: show asp table classifier match regex, show asp table
filter match reg ex.
ASDM does not support this command; enter the command using the Command Line Tool.
Also available in Version 8.4(3).
Table1-2 New Features forASA Version 8.6(1)/ASDM Version 6.6(1) (continued)
Feature Description