Table Of Contents
Release Notes for Cisco PDM Version 4.1(5) for Firewall Services Module
Cisco PDM Version 4.1(5) is a web-based application used to configure and monitor the Firewall Services Module (FWSM) on a Catalyst 6500 series switch or Cisco 7600 series router. PDM Version 4.1(5) requires FWSM Release 2.3 or 2.2 and supports all of the configuration features in this release.
Note PDM Version 4.1(5) is a single image that supports FWSM Release 2.3 and 2.2. It does not support FWSM Release 1.x, FWSM Release 3.x or above, or the ASA or PIX platforms.
This document includes the following sections:
PDM Software Overview
PDM Version 4.1(5) is a single image that provides secure administration of the FWSM. PDM is implemented as a signed Java applet, which downloads to your PC or workstation when you point your browser at the FWSM and does not require a plug-in or other software to be preinstalled. PDM manages FWSM Release 2.3 and 2.2 when it runs in single or multiple context modes.
PDM provides a graphical user interface to the FWSM to administer it without requiring knowledge of the command-line interface (CLI). PDM also maintains compatibility with the FWSM CLI and includes a tool for using the standard CLI commands within the PDM application. PDM lets you graph many aspects of the FWSM, as well as print or export graphs of the traffic through the FWSM and of system activity.
To help you use PDM, the application provides online help as well as a help table of contents, index, and glossary.
Switch and Router System Requirements
The switch and router models that are supported by the FWSM are as follows:
•Catalyst 6500 series switches with the following required components:
–Supervisor engine with Cisco IOS software or Catalyst operating system
–Multilayer Switch Feature Card (MSFC 2) with Cisco IOS software
•Cisco 7600 series routers, with the following required components:
–Supervisor engine with Cisco IOS software
–MSFC 2 with Cisco IOS software
For more information about supported supervisor engine and software versions and the supported Cisco IOS software, see the Catalyst 6500 Series Switch and Cisco 7600 Series Router Firewall Services Module Configuration Guide Version 2.3.
Note The FWSM does not support a direct connection to a switch WAN port because WAN ports do not use static virtual local area networks (VLANs). However, the WAN port can connect to the MSFC, which can also connect to the FWSM.
For more information on switch or router requirements for FWSM, see the following website: http://www.cisco.com/en/US/products/hw/modules/ps2706/ps4452/tsd_products_support_model_home.html
The following sections list the system requirements for PDM Version 4.1(5) software.
The FWSM must meet the following requirements to successfully install and run PDM:
•Minimum Software Versions—Verify that your FWSM meets the requirements listed in the Release Notes for the Catalyst 6500 Series Switch and Cisco 7600 Series Router Firewall Services Module Software Release. You must have Release 2.3 or 2.2 installed on the FWSM before using PDM Version 4.1(5). For more information, see the Cisco PDM Installation and Configuration Guide for Firewall Services Module.
•Upgrading Software—When you install a new version of PDM, close all browser sessions before launching PDM. For information on upgrading your FWSM, see the following websites:
Caution If you are using Management Center for Firewalls, use PDM for monitoring only. All changes made using PDM will be overwritten the next time Management Center for Firewalls synchronizes with the FWSM.
Maximum Configuration File Size
For optimum performance, we recommend a configuration file of no more than 500 KB when using PDM.
FWSM Firewall configuration files over 500 KB may interfere with the performance of PDM on your workstation in the following situations:
•While executing commands such as the write term command and the show running-config command
•Failover (the configuration synchronization time)
•When you click the Refresh button in PDM for the first time
Table 1 lists the supported platforms for PDM Version 4.1(5).
Features Introduced in PDM Version 4.1
No new features have been introduced in PDM Version 4.1(5) since PDM Version 4.1(1). The purpose of this release is to resolve open caveats.
This section describes important notes for PDM software Version 4.1.
PDM does not support the one-time password (OTP) authentication mechanism.
The following sections describe the caveats for PDM software Version 4.1(5).
For your convenience in locating caveats in the Cisco Bug Toolkit, the caveat titles listed in this section are taken directly from the Cisco Bug Toolkit database. These caveat titles are not intended to be read as complete sentences because the title field length is limited. In the caveat titles, some truncation of wording or punctuation may be necessary to provide the most complete and concise description.
To view additional caveat information, use Bug Navigator II on CCO. Bug Navigator II may be accessed at the following website:
Open Caveats in Version 4.1(5)
The caveats in Table 2 are yet to be resolved in this version.
Resolved Caveats in Version 4.1(5)
The caveats in Table 3 are resolved in Version 4.1(5).
Obtaining Documentation and Submitting a Service Request
For information on obtaining documentation, submitting a service request, and gathering additional information, see the monthly What's New in Cisco Product Documentation, which also lists all new and revised Cisco technical documentation, at:
Subscribe to the What's New in Cisco Product Documentation as a Really Simple Syndication (RSS) feed and set content to be delivered directly to your desktop using a reader application. The RSS feeds are a free service and Cisco currently supports RSS version 2.0.