Cisco Systems ASA 5585-X Manual De Usuario
1-2
Cisco ASA Series Firewall CLI Configuration Guide
Chapter 1 Configuring a Service Policy Using the Modular Policy Framework
Information About Service Policies
Supported Features
lists the features supported by Modular Policy Framework.
Feature Directionality
Actions are applied to traffic bidirectionally or unidirectionally depending on the feature. For features
that are applied bidirectionally, all traffic that enters or exits the interface to which you apply the policy
map is affected if the traffic matches the class map for both directions.
that are applied bidirectionally, all traffic that enters or exits the interface to which you apply the policy
map is affected if the traffic matches the class map for both directions.
Table 1-1
Modular Policy Framework
Feature
For Through
Traffic?
Traffic?
For Management
Traffic?
Traffic?
See:
Application inspection (multiple
types)
types)
All except
RADIUS
accounting
RADIUS
accounting
RADIUS
accounting only
accounting only
•
•
•
•
•
•
ASA CSC
Yes
No
ASA IPS
Yes
No
ASA CX
Yes
No
NetFlow Secure Event Logging
filtering
filtering
Yes
Yes
See the general operations configuration guide.
QoS input and output policing
Yes
No
QoS standard priority queue
Yes
No
QoS traffic shaping, hierarchical
priority queue
priority queue
Yes
Yes
TCP and UDP connection limits
and timeouts, and TCP sequence
number randomization
and timeouts, and TCP sequence
number randomization
Yes
Yes
TCP normalization
Yes
No
TCP state bypass
Yes
No
User statistics for Identity
Firewall
Firewall
Yes
Yes
See the user-statistics command in the command
reference.
reference.