Release Notes

14
Release Notes for Cisco Security Manager 4.0
OL-21744-02
Caveats
Table 9 Firewall Services Caveats
Reference Number Description
CSCsc22934 ACL limitations for Layer 2 interfaces on IOS ISR devices
CSCsh68101 Activity Report: Issues with access rules table change report
CSCsh94210 Problems matching interface name when reusing AAA policy objects
CSCsi18871 Inspect Map: PIX 7.1 gtp-map subcommand order is not preserved
CSCsk33350 Discovery of PAM Mappings with Inspection Rules is incorrect
CSCsk46057 Changes to csm.properties files lost during Security Manager upgrade
CSCsq75974 Static Rules ACL with source interface are not discovered
CSCsr25786 AAA server object: no error issued when interface not specified
CSCsz53354 MAC Exempt list cannot be ordered
CSCtb00116 Wrong error message after sorting the Access control by ACL name
CSCtb03821 Failover: Deployment fails with subinterface as failover Interface
CSCtb51491 Delta generated for Object-groups
CSCtc43031 preview configuration failing network object non-contiguous mask
CSCtc43845 Failover: ASA license-related deployment failure
CSCtc44562 DES: Unmanaged policy-map configs removed after discovery
CSCtc56731 Cannot edit device overrides in nested ACL objects
CSCtc77998 SNMP Policy: Port field is applicable to only the admin context.
CSCtd46245 Security Level changes when name of interface changed
CSCtd71241 Unassign of translation rules should remove object nat rules also
CSCte08355 Auto NAT: Ordering of Auto NAT rules is not correct.
CSCte44602 Bottom align single row column headers if other headers are on 2 rows
CSCte60495 AUS 3.3SP1 ’no monitor-interface’ ASA base license auto-update failure
CSCte68245 Duplicate AAA Server Building Blocks.
CSCtf08441 ZBF:No validation message for protocols unsupported with IOS versions
CSCtf32103 ACL BB renames if remark is used
CSCtf68128 Proposed Performance optimization in NAT (translation and simplified)
CSCtf71882 Deployment failure when Static Route policy uses “all interfaces” role
CSCtf86613 Generates the duplicate port-map commands with ZBF port-map config
CSCtg08943 Deployment fails because of duplicate entries in the NAT address pool.
CSCtg21437 Discovery fails if IOS config contains OGs with name larger than 64 char
CSCtg33456 Inspection rule with HTTP map - Deploy fails
CSCtg44613 Interface role added in CLI, while configuring TFTP for system context
CSCtg48075 Simplified NAT: Additional validation required in Activity Validation
CSCtg60293 <NAT Rule> select Edit Source, not displaying BB selector Dialog
CSCtg64802 Edit BB throws Exception, After select OK button,If same name BB present
CSCtg67285 Simplified NAT: Edit Source not properly changing the Source