Cisco Systems OL-16647-01 Client Access Rules

35-23
Cisco ASDM User Guide
OL-16647-01
Chapter 35 General
ACL Manager
– Server Addresses (space delimited)—Specifies the IP addresses of the IPSec backup servers.
This field is available only when the value of the Server Configuration selection is Use the
Backup Servers Below.
Modes
The following table shows the modes in which this feature is available:
Client Access Rules
The table on this dialog box lets you view up to 25 client access rules. If you deselect the Inherit check
box, the Add, Edit, and Delete buttons become active and the following column headings appear in the
table:
– Priority—Shows the priority for this rule.
– Action—Specifies whether this rule permits or denies access.
– Client Type—Specifies the type of VPN client to which this rule applies, software or hardware,
and for software clients, all Windows clients or a subset.
– VPN Client Version—Specifies the version or versions of the VPN client to which this rule
applies. This box contains a comma-separated list of software or firmware images appropriate
for this client.
Modes
The following table shows the modes in which this feature is available:
Add/Edit Client Access Rule
The Add or Edit Client Access Rule dialog box adds a new client access rule for an IPSec group policy
or modifies an existing rule.
Fields
• Priority—Shows the priority for this rule.
• Action—Specifies whether this rule permits or denies access.
• VPN Client Type—Specifies the type of VPN client to which this rule applies, software or hardware,
and for software clients, all Windows clients or a subset. Some common values for VPN Client Type
include VPN 3002, PIX, Linux, * (matches all client types), Win9x (matches Windows 95, Windows
98, and Windows ME), and WinNT (matches Windows NT, Windows 2000, and Windows XP). If
you choose *, do not configure individual Windows types such as Windows NT.
• VPN Client Version—Specifies the version or versions of the VPN client to which this rule applies.
This box contains a comma-separated list of software or firmware images appropriate for this client.
The following caveats apply:
Firewall Mode Security Context
Routed Transparent Single
Multiple
Context System
• — • ——