1-2
Cisco ASA Series Firewall CLI Configuration Guide
Chapter1 Configuring a Service Policy Using the Modular Policy Framework
Information About Service Policies
Supported Features
Table 1 -1 lists the features supported by Modular Policy Framework.
Feature Directionality
Actions are applied to traffic bidirectionally or unidirectionally depending on the feature. For features
that are applied bidirectionally, all traffic that enters or exits the interface to which you apply the policy
map is affected if the traffic matches the class map for both directions.
Table1-1 Modular Policy Framework
Feature
For Through
Traffic?
For Management
Traffic? See:
Application inspection (multiple
types)
All except
RADIUS
accounting
RADIUS
accounting only
•Chapter 9, “Getting Started with Application
Layer Protocol Inspection.”
•Chapter 10, “Configuring Inspection of Basic
Internet Protocols.”
•Chapter 11, “Configuring Inspection for Voice
and Video Protocols.”
•Chapter 12, “Configuring Inspection of Database
and Directory Protocols.”
•Chapter 13, “Configuring Inspection for
Management Application Protocols.”
•Chapter 25, “Configuring the ASA for Cisco
Cloud Web Security.”
ASA CSC Yes No Chapter 32, “Configuring the ASA CSC Module.”
ASA IPS Yes No Chapter 31, “Configuring the ASA IPS Module.”
ASA CX Yes No Chapter 30, “Configuring the ASA CX Module.”
NetFlow Secure Event Logging
filtering
Yes Yes See the general operations configuration guide.
QoS input and output policing Yes No Chapter 23, “Configuring QoS.”
QoS standard priority queue Yes No Chapter 23, “Configuring QoS.”
QoS traffic shaping, hierarchical
priority queue
Yes Yes Chapter 23, “Configuring QoS.”
TCP and UDP connection limits
and timeouts, and TCP sequence
number randomization
Yes Yes Chapter 22, “Configuring Connection Settings.”
TCP normalization Yes No Chapter 22, “Configuring Connection Settings.”
TCP state bypass Yes No Chapter 22, “Configuring Connection Settings.”
User statistics for Identity
Firewall
Yes Yes See the user-statistics command in the command
reference.