Filter
Top Products
57-5
User Guide for Cisco Security Manager 4.4
OL-28826-01
Chapter 57 Configuring Security Contexts on Firewall Devices
Managing Security Contexts
Step 1 Ensure Device View is your present application view; if necessary, click the Device View button on the
toolbar.
For more information on using the Device View to configure device policies, see Managing Policies in
Device View and the Site-to-Site VPN Manager, page 5-28).
Step 2 Select the appliance you want to configure.
Step 3 Select Security Contexts in the Device Policy selector to display the Security Contexts page.
Note The child contexts of a multiple-mode device are represented using a different icon than firewall
devices in single mode.
Step 4 Add, edit and delete contexts, as necessary:
• To define a new context, click the Add Row button at the bottom of the page to open the Add
Security Context box.
• To edit an existing context, select the desired entry in the Security Contexts list and then click the
Edit Row button at the bottom of the page to open the Edit Security Context dialog box.
• To delete an existing context, select the desired entry in the list and then click the Delete Row
button.
Note Deleting a security context here will also cause the security context device to be
removed from device inventory.
Confirm the deletion of the security context and corresponding security context device.
Note Except for the titles, the Add Security Context dialog box and the Edit Security Context dialog
box are identical. For PIX/ASA devices, see Add/Edit Security Context Dialog Box (PIX/ASA),
page 57-7 for more information; for FWSMs, see Add/Edit Security Context Dialog Box
(FWSM), page 57-5 for more information.
Add/Edit Security Context Dialog Box (FWSM)
The Add Security Context and Edit Security Context dialog boxes let you define and maintain contexts
for the currently selected Firewall Service Module. (Except for their titles, the two dialog boxes are
identical.)
Note that at least one security context must be designated as the Admin context.
Caution Security Manager does not support mapped (that is, “named” or “aliased”) interfaces for FWSMs. If you
discover an FWSM with named interfaces and then change the related configuration, redeployment will
fail. Replace any interface aliases with the appropriate VLAN IDs.