Cisco ASA

All-in-One Firewall, IPS, and VPN Adaptive Security Appliance

Third Edition

Copyright © 2014 Pearson Education, Inc.

ISBN-10: 1-58714-307-0
ISBN-13: 978-1-58714-307-6

Warning and Disclaimer

Every effort has been made to make this book as complete and as accurate as possible, but no warranty or fitness is implied. The information provided is on an "as is" basis. The author and the publisher shall have neither liability nor responsibility to any person or entity with respect to any loss or damages arising from the information contained in this book or from the use of the CD or programs accompanying it.

When reviewing corrections, always check the print number of your book. Corrections are made to printed books with each subsequent printing.

First Printing: April 2014

Corrections for August 11, 2016

Pg / Error – Fourth Printing / Correction
1139 / Chapter 25, Figure 25-4, IP Header, Third Field
Reads:
TOS/SDCP / Should read:
TOS/DSCP


Corrections for January 6, 2016

Pg / Error – Second Printing / Correction
801 / Chapter 19, First Paragraph, Fifth Sentence
Reads:
Some Point-to-Point WAN technologies include Frame Relay, Integrated Services Digital Network (ISDN), and Asynchronous Transfer Mode (ATM) / Should read:
Point-to-Point & Multipoint WAN technologies include Legacy Frame Relay, Integrated Services Digital Network (ISDN), and Asynchronous Transfer Mode (ATM) and current MPLS, Carrier Ethernet circuits and Wireless licensed and license free circuits.
Point-to-Point Only WAN technologies include legacy 56Kbps DDS and 64Kbps / 128Kbps leased lines, Fractional and Full T1 / E1 circuits, E3/T3 circuits, dedicated HDSL and SDSL circuits.
933 / Chapter 21, Note
Reads:
Note Cisco ASA supports digital certificates for remote-access and site-to-site IPsec VPN session authentication, as well as for WebVPN and SSL administrative sessions. / Should read:
Note Cisco ASA supports digital certificates for remote-access and site-to-site IPsec VPN session authentication, as well as for SSLVPN and SSL administrative sessions.
934 / Chapter 21, Second Bullet
Reads:
§  Microsoft Windows 2000 and 2003 CA Server(s) / Should read:
§  Microsoft Windows Server Operating System


Corrections for November 19, 2014

Pg / Error – Second Printing / Correction
652 / Chapter 16, Example 16-3, First two Lines in Configuration
Reads:
route outside 0.0.0.0.0 0.0.0 198.51.100.1 track 1
route outside 0.0.0.0 0.0.0.0 203.0.113.1 100 / Should read:
route outside1 0.0.0.0 0.0.0.0 198.51.100.1 track 1
route outside2 0.0.0.0 0.0.0.0 203.0.113.1 100

Corrections for June 25, 2014

Pg / Error / Correction
17 / Chapter 1, Figure 1-7
Figure printed twice / Remove second figure in Figure 1-7
19 / Chapter 1, Figure 1-8, Second Box in Step 1
Reads:
DES
MDS
DH1
Preshared / Should read:
3DES
SHA
DH2
Preshared

This errata sheet is intended to provide updated technical information. Spelling and grammar misprints are updated during the reprint process, but are not listed on this errata sheet.

Updated 08/11/2016