Cisco 5505 - ASA Firewall Edition Bundle, Cli Configuration Manual

Page: 1064 / 2164

1-2
Cisco ASA Series CLI Configuration Guide
Chapter 1 Configuring a Service Policy Using the Modular Policy Framework
Information About Service Policies
Supported Features
Table 1-1 lists the features supported by Modular Policy Framework.
Feature Directionality
Actions are applied to traffic bidirectionally or unidirectionally depending on the feature. For features
that are applied bidirectionally, all traffic that enters or exits the interface to which you apply the policy
map is affected if the traffic matches the class map for both directions.
Table 1-1 Modular Policy Framework
Feature
For Through
Traffic?
For
Management
Traffic?
See:
Application inspection (multiple
types) All except
RADIUS
accounting
RADIUS
accounting
only
•
Chapter 1, “Getting Started with Application
Layer Protocol Inspection.”
•
Chapter 1, “Configuring Inspection of Basic
Internet Protocols.”
•
Chapter 1, “Configuring Inspection for Voice and
Video Protocols.”
•
Chapter 1, “Configuring Inspection of Database
and Directory Protocols.”
•
Chapter 1, “Configuring Inspection for
Management Application Protocols.”
•
Chapter 1, “Configuring the ASA for Cisco
Cloud Web Security.”
ASA CSC Yes No Chapter 1, “Configuring the ASA CSC Module.”
ASA IPS Yes No Chapter 1, “Configuring the ASA IPS Module.”
ASA CX Yes No Chapter 1, “Configuring the ASA CX Module.”
NetFlow Secure Event Logging
filtering Yes Yes Chapter 1, “Configuring NetFlow Secure Event
Logging (NSEL).”
QoS input and output policing Yes No Chapter 1, “Configuring QoS.”
QoS standard priority queue Yes No Chapter 1, “Configuring QoS.”
QoS traffic shaping, hierarchical
priority queue Yes Yes Chapter 1, “Configuring QoS.”
TCP and UDP connection limits
and timeouts, and TCP sequence
number randomization Yes Yes Chapter 1, “Configuring Connection Settings.”
TCP normalization Yes No Chapter 1, “Configuring Connection Settings.”
TCP state bypass Yes No Chapter 1, “Configuring Connection Settings.”
User statistics for Identity
Firewall Yes Yes See the user-statistics command in the command
reference.