Features Configured With Service Policies - Cisco ASA Series Configuration Manual

Firewall cli, asa services module, and the adaptive security virtual appliance
Hide thumbs Also See for ASA Series:
Table of Contents

Advertisement

About Service Policies

Features Configured with Service Policies

The following table lists the features you configure using service policies.
Table 11-1
Features Configured with Service Policies
Feature
Application inspection (multiple
types)
ASA IPS
ASA CX
ASA FirePOWER (ASA SFR)
NetFlow Secure Event Logging
filtering
QoS input and output policing
QoS standard priority queue
TCP and UDP connection limits
and timeouts, and TCP sequence
number randomization
TCP normalization
TCP state bypass
User statistics for Identity
Firewall
Feature Directionality
Actions are applied to traffic bidirectionally or unidirectionally depending on the feature. For features
that are applied bidirectionally, all traffic that enters or exits the interface to which you apply the policy
map is affected if the traffic matches the class map for both directions.
When you use a global policy, all features are unidirectional; features that are normally bidirectional
Note
when applied to a single interface only apply to the ingress of each interface when applied globally.
Because the policy is applied to all interfaces, the policy will be applied in both directions so
bidirectionality in this case is redundant.
Cisco ASA Series Firewall CLI Configuration Guide
11-4
For Through
For Management
Traffic?
Traffic?
All except
RADIUS
RADIUS
accounting only
accounting
Yes
No
Yes
No
Yes
No
Yes
Yes
Yes
No
Yes
No
Yes
Yes
Yes
No
Yes
No
Yes
Yes
Chapter 11
Service Policy Using the Modular Policy Framework
See:
Chapter 12, "Getting Started with Application
Layer Protocol Inspection."
Chapter 13, "Inspection of Basic Internet
Protocols."
Chapter 14, "Inspection for Voice and Video
Protocols."
Chapter 15, "Inspection of Database, Directory,
and Management Protocols."
Chapter 8, "ASA and Cisco Cloud Web Security."
See the ASA IPS quick start guide.
See the ASA CX quick start guide.
Chapter 7, "ASA FirePOWER Module."
See the general operations configuration guide.
Chapter 17, "Quality of Service."
Chapter 17, "Quality of Service."
Chapter 16, "Connection Settings."
Chapter 16, "Connection Settings."
Chapter 16, "Connection Settings."
See the user-statistics command in the command
reference.

Hide quick links:

Advertisement

Table of Contents
loading

Table of Contents