Exploring the Pull-Down Menus
Across the top of the page in the ASDM display are seven
pull-down menus. The menus are labeled File, Rules, Search, Options, Tools,
Wizards, and Help.
Table 4-1 provides a
general overview of each pull-down menu. A more detailed explanation is provided
in the section following the table.
Table 4-1. Pull-Down Menu Command Summary
|
Pull-Down Menu |
Summary |
|
File |
Contains commands to save configuration files and internal log
buffer to the Flash memory in the ASA/PIX Security Appliance and various other
locations. |
|
Rules |
Used to insert items into a rules list. This pull-down is
active only when the Configuration icon is selected in the navigation bar and
the security policy or NAT panels are active. Note that functions in the Rules
menu are also accessible on the toolbar, in the rules panels, and from the
buttons or right-mouse click menus in the tables. |
|
Search |
Used to search items that exist in a rules list. This pull-down
is active only when the Configuration icon is selected and the security policy
or NAT panels are active. |
|
Options |
Sets global behaviors of ASDM such as previewing commands or
prompting when ASDM is exited. |
|
Tools |
Contains tools for common system tasks for the ASA/PIX Security
Appliance. This includes Flash, file management, image and ASDM upgrades, a CLI
tool to allow direct execution of most ASA/PIX commands, and system
reloads. |
|
Wizards |
Houses the two wizards that are available with ASDM: the VPN
Wizard and the Startup Wizard. |
|
Help |
Provides full access to three ASDM help systems, including a
table of contents and an online help
search. |
Many items within the pull-down menus contain submenus and
information to help troubleshoot or configure the ASA/PIX Security Appliance.
Detailed information about each item follows.
File Menu
The File menu contains common functions for Flash and file
operations that you might need to perform on the ASA/PIX Security Appliance. The
File menu pull-down contains 11 items, as shown in Figure 4-3 and described in the list that follows:
-
Refresh ASDM with Running
Configuration on the Device— This menu item enables you to ensure that
the configuration you are displaying in ASDM is the current running
configuration. The running configuration contains the commands that are
currently active on the security appliance. This arrow turns to red when the
ASDM configuration is out of sync with the ASA/PIX Security Appliance.
-
Reset Device to Factory Default
Configuration— Choosing this menu item erases the current configuration
on the ASA/PIX and sets all commands back to their factory default settings.
-
Show Running Configuration in New
Window— ASDM will display the running configuration in a new browser
window. This provides you with the opportunity to see the commands that are
current on your security appliance in the ASA/PIX native command-line interface
format.
-
Save Running Configuration to
Flash— This option saves the current running configuration to Flash. It
overwrites the current startup configuration, and the next time the security
appliance is booted, is the active configuration.
-
Save Running Configuration to TFTP
Server— This option enables you to save the current running configuration
of your ASA/PIX to a TFTP server. This can be a valuable tool if something
happens to the memory of your ASA/PIX Security Appliance and you need to do a
restore from a remote source. If you select this option, you are prompted for
the IP address and directory of your TFTP server.
-
Save Running Configuration to Standby
Unit— This option enables you to copy the current configuration to
another ASA/PIX Security Appliance if you are using an active/standby
configuration. Standby features are beyond the scope of this book; you can find
further information regarding standby features on the Cisco website.
-
Save Internal Log Buffer to
Flash— This enables you to save your system log to the Flash on the
ASA/PIX Security Appliance. In most cases, administrators would want to save the
buffer to a syslog server, but this feature is useful if you syslog server is
inaccessible or you are logging a small amount of real-time data from analysis
or troubleshooting.
-
Print— The Print option
enables you to print information contained in only select pages of the ASDM
GUI.
-
Clear ASDM Cache— Like most
web applications, ASDM saves reusable information in a cache file. This option
enables you to clear the cache, if you want. This cached data is saved in a
compressed format on your PC. If you leave the files in cache, ASDM saves
reusable information in a cache file to speed up future access. The cached files
are not a significant resource on your PC; the average size of the encrypted
cache files is between 5.0 and 6.0 MB.
-
Clear Internal Log Buffer—
When troubleshooting an error message in a security appliance, it is often
useful to clear out old messages so you can see only the sequence of messages
applicable to your troubleshooting. The Clear Internal Log Buffer option
accomplishes this task.
-
Exit— This option disconnects
your ASDM session from the ASA/PIX Security Appliance and shuts down the ASDM
GUI. You are prompted to both save configuration changes and to verify that you
really want to exit from the application.
Rules Menu
The Rules menu is activated only when the Configuration > Security Policy or the Configuration > NAT functions are chosen from the
navigation bar.
The basic function of the Rules menu is to make it easier for
you to place commands within long lists of items, such as the rules list and the
network address translation (NAT) list.
All of the functions in the Rules menu can be done by
right-clicking the display panels if you navigate into the Configuration > Security Policy and the Configuration > NAT functions. For deploying
commands more quickly when using ASDM, right-clicking tends to be faster than
using the pull-down menu.
Figure 4-4 shows the
activated Rules menu.

Each command in this menu helps you to control the order in
which items appear in the list. The Configuration/Security Policy list is a
compilation of all the access rules that you have configured in your security
appliance. Using the Rules pull-down menu, you can easily add, copy, and paste
rules as desired. It's an excellent tool to help you keep rules in an order that
makes sense to you. By default, ASDM lists rules in the order in which they are
entered for each interface.
An exhaustive explanation of each rule option isn't necessary
because these actions are similar to commands that PC users deal with on a daily
basis.
Search Menu
The Search menu is activated only when the Configuration > Security Policy or the Configuration > NAT functions are chosen from the
navigation bar.
The basic functions of the Search menu are to make it easier to
search the fields of the rules that might be long and to find keywords within
the list.
The activated Search menu is shown in Figure 4-5, and the options are described in the list that
follows:
-
Search by Field— This option
enables you to perform a text search within either the Security Policy or NAT
list. To help you narrow your search, this option enables you to perform a
search with an any or all qualifier; in addition, it displays a pick list of
known values. For example, if you choose Search by Source Address, the Value
field will contain a selection box in which you can click and see all known
source addresses. You can then click the desired source address, expediting your
search.
-
Search by Host/Network— When
this option is selected, a dialog box displays enabling you to search on one of
the ASA/PIX Security Appliance interfaces. You can just highlight the network
you want to search, and the resulting data displays within the ASDM active
window.
-
Clear Search Selections— This
option clears any of the data that had been found and highlighted by the
previous search.

Options Menu
The Options menu enables you to control how ASDM displays
certain data.
Figure 4-6 shows the
Options menu, and the list that follows describes the options available from
this menu:
-
Show Commands Ignored by ASDM on
Device— The commands that show up in this list are commands that aren't
supported by ASDM. To see any commands that have been ignored, choose this
pull-down menu item.
-
Preferences— Figure 4-7 illustrates the preferences controlled by this
menu item.


These preferences are saved in a file and applied for
subsequent ASDM sessions:
-
Preview Commands Before Sending to
the Device— This preference causes ASDM to display the native ASA/PIX
commands every time a change is made in ASDM. Many advanced users prefer this
option so that they can see exactly which commands are being sent to the ASA/PIX
Security Appliance. This option serves as an excellent way with which to become
familiar with the new ASA/PIX version 7 command set.
-
Confirm Before Exiting ASDM—
When this option is enabled, ASDM prompts you before you disconnect from the
security appliance and exit the application. This is on by default to help keep
users from exiting ASDM unintentionally.
-
Issue "Clear Xlate" Cmd When
Access-Lists Are Deployed— The xlate table is a data structure that keeps
track of connections through the security appliance. When an access list is
closed, those connects are still active until the xlate table is cleared. This
option clears the active connections table on the device for you, instead of you
having to go to a command menu and enter the CLI command.
-
Display Dialog About the VPN Wizard
When the VPN Tab Is Selected— This option instructs ASDM to prompt you
with a menu to give you the choice of whether you would like to use the VPN
Wizard if you are accessing the VPN configuration. It encourages you to use the
wizard because it's a step-by-step process that will ensure that you set up all
commands correctly.