Cisco ASA Series Cli Configuration Manual page 905

Configuring the ASA to Integrate with Cisco
TrustSec
This chapter includes the following sections:
•
•
•
•
•
•
•
•
Information About the ASA Integrated with Cisco TrustSec
This section includes the following topics:
•
•
•
•
•
•
•
Information about Cisco TrustSec
Traditionally, security features such as firewalls performed access control based on predefined IP
addresses, subnets and protocols. However, with enterprises transitioning to borderless networks, both
the technology used to connect people and organizations and the security requirements for protecting
data and networks have evolved significantly. End points are becoming increasingly nomadic and users
often utilize a variety of end points (for example, laptop versus desktop, smart phone, or tablet), which
Information About the ASA Integrated with Cisco TrustSec, page 1-1
Licensing Requirements when Integrating the ASA with Cisco TrustSec, page 1-7
Prerequisites for Integrating the ASA with Cisco TrustSec, page 1-8
Guidelines and Limitations, page 1-9
Configuring the ASA for Cisco TrustSec Integration, page 1-10
Configuration Example, page 1-21
Monitoring the ASA Integrated with Cisco TrustSec, page 1-22
Feature History for the ASA-Cisco TrustSec Integration, page 1-31
Information about Cisco TrustSec, page 1-1
About SGT and SXP Support in Cisco TrustSec, page 1-2
Roles in the Cisco TrustSec Solution, page 1-3
Security Group Policy Enforcement, page 1-3
How the ASA Enforces Security Group Based Policies, page 1-4
About Speaker and Listener Roles on the ASA, page 1-5
Features of the ASA-Cisco TrustSec Integration, page 1-6
1
C H A P T E R
Cisco ASA Series CLI Configuration Guide
1-1