History For Objects - Cisco ASA Series Configuration Manual

Chapter 2 Objects for Access Control

History for Objects

Feature Name
Object groups
Regular expressions and policy maps
Objects
User Object Groups for Identity Firewall
Security Group Object Groups for Cisco
TrustSec
Mixed IPv4 and IPv6 network object groups
Extended ACL and object enhancement to filter
ICMP traffic by ICMP code
Platform
Releases Description
7.0(1) Object groups simplify ACL creation and maintenance.
We introduced or modified the following commands:
object-group protocol, object-group network,
object-group service, object-group icmp_type.
7.2(1) Regular expressions and policy maps were introduced to be
used under inspection policy maps. The following
commands were introduced: class-map type regex, regex,
match regex.
8.3(1) Object support was introduced.
We introduced or modified the following commands:
object-network, object-service, object-group network,
object-group service, network object, access-list
extended, access-list webtype, access-list remark.
8.4(2) User object groups for identity firewall were introduced.
We introduced the following commands: object-network
user, user.
8.4(2) Security group object groups for Cisco TrustSec were
introduced.
We introduced the following commands: object-network
security, security.
9.0(1) Previously, network object groups could only contain all
IPv4 addresses or all IPv6 addresses. Now network object
groups can support a mix of both IPv4 and IPv6 addresses.
You cannot use a mixed object group for NAT.
Note
We modified the following commands: object-group
network.
9.0(1) ICMP traffic can now be permitted/denied based on ICMP
code.
We introduced or modified the following commands:
access-list extended, service-object, service.
Cisco ASA Series Firewall CLI Configuration Guide
History for Objects
2-11