Cisco Systems OL-16647-01 Add/Edit Certificate Matching Rule

35-52
Cisco ASDM User Guide
OL-16647-01
Chapter 35 General
Mapping Certificates to IPSec or SSL VPN Connection Profiles
• Add/Edit Certificate Matching Rule Criterion
Add/Edit Certificate Matching Rule
Use the Add/Edit Certificate Matching Rule dialog box to assign the name of a list (map) to a
connection profile.
Fields
• Map—Choose one of the following:
– Existing—Select the name of the map to include the rule.
– New—Enter a new map name for a rule.
• Rule Priority—Type a decimal to specify the sequence with which the security appliance evaluates
the map when it receives a connection request. For the first rule defined, the default priority is 10.
The security appliance evaluates each connection against the map with the lowest priority number
first.
• Mapped to Connection Profile—Select the connection profile, formerly called a “tunnel group,”
to map to this rule.
If you do not assign a rule criterion to the map, as described in the next section, the security appliance
ignores the map entry.
Modes
The following table shows the modes in which this feature is available: