1-2
Cisco ASA Series Firewall ASDM Configuration Guide
Chapter1 Configuring a Service Policy
Information About Service Policies
Feature Directionality
Actions are applied to traffic bidirectionally or unidirectionally depending on the feature. For features
that are applied bidirectionally, all traffic that enters or exits the interface to which you apply the policy
map is affected if the traffic matches the class map for both directions.
Table1-1 Service Policy Rule Features
Feature
For Through
Traffic?
For Management
Traffic? See:
Application inspection (multiple
types)
All except
RADIUS
accounting
RADIUS
accounting only
•Chapter 10, “Getting Started with Application
Layer Protocol Inspection.”
•Chapter 11, “Configuring Inspection of Basic
Internet Protocols.”
•Chapter 12, “Configuring Inspection for Voice
and Video Protocols.”
•Chapter 13, “Configuring Inspection of Database
and Directory Protocols.”
•Chapter 14, “Configuring Inspection for
Management Application Protocols.”
•Chapter 25, “Configuring the ASA for Cisco
Cloud Web Security.”
ASA CSC Yes No Chapter 32, “Configuring the ASA CSC Module.”
ASA IPS Yes No Chapter 31, “Configuring the ASA IPS Module.”
ASA CX Yes No Chapter 30, “Configuring the ASA CX Module.”
NetFlow Secure Event Logging
filtering
Yes Yes Chapter 43, “Configuring NetFlow Secure Event
Logging (NSEL),” in the general operations
configuration guide.
QoS input and output policing Yes No Chapter 23, “Configuring QoS.”
QoS standard priority queue Yes No Chapter 23, “Configuring QoS.”
QoS traffic shaping, hierarchical
priority queue
Yes Yes Chapter 23, “Configuring QoS.”
TCP and UDP connection limits
and timeouts, and TCP sequence
number randomization
Yes Yes Chapter 22, “Configuring Connection Settings.”
TCP normalization Yes No Chapter 22, “Configuring Connection Settings.”
TCP state bypass Yes No Chapter 22, “Configuring Connection Settings.”
User statistics for Identity
Firewall
Yes Yes See the user-statistics command in the command
reference.