Signature Update version S639 introduced a bad value for one of the signature 3255.0 parameters. This bad parameter was included in signature updates S639 and S640. See CSCtz29196 for details. For this reason, we have removed S639 and S640 from CCO.
Because this signature, by default, was retired and disabled, the bad parameter does not affect the functionality of the sensor. If you have modified signature 3255.0, you must restore the signature to its default value prior to applying an update package.
Signature 3255.0 has been obsoleted and has been replaced with signature 3255.1. Updating to S641 will resolve the problem. S641 will be released on Monday, April 16th, 2012.
Table of ContentsIntroductionVersion HistoryPossible Future
UpdatesDocuments PurposeNAT Operation in ASA 8.3+ SectionsRule Types
Network Object NATTwice NAT / Manual NATRule Types used per SectionNAT
Types used with Twice NAT / Manual NAT and Network Obje...
[toc:faq]Introduction:This document describes details on how NAT-T
works.Background:ESP encrypts all critical information, encapsulating
the entire inner TCP/UDP datagram within an ESP header. ESP is an IP
protocol in the same sense that TCP and UDP are I...