Cisco 5510 - ASA SSL / IPsec VPN Edition User Manual

1-2
Cisco ASA Series CLI Configuration Guide
Chapter 1 Configuring a Service Policy Using the Modular Policy Framework
Information About Service Policies
Supported Features
Table 1-1 lists the features supported by Modular Policy Framework.
Feature Directionality
Actions are applied to traffic bidirectionally or unidirectionally depending on the feature. For features
that are applied bidirectionally, all traffic that enters or exits the interface to which you apply the policy
map is affected if the traffic matches the class map for both directions.
Table 1-1 Modular Policy Framework
Feature
For Through
Traffic?
For
Management
Traffic? See:
Application inspection (multiple
types)
All except
RADIUS
accounting
RADIUS
accounting only
• Chapter 1, “Getting Started with Application
Layer Protocol Inspection.”
• Chapter 1, “Configuring Inspection of Basic
Internet Protocols.”
• Chapter 1, “Configuring Inspection for Voice and
Video Protocols.”
• Chapter 1, “Configuring Inspection of Database
and Directory Protocols.”
• Chapter 1, “Configuring Inspection for
Management Application Protocols.”
• Chapter 1, “Configuring the ASA for Cisco
Cloud Web Security.”
ASA CSC
Yes No Chapter 1, “Configuring the ASA CSC Module.”
ASA IPS
Yes No Chapter 1, “Configuring the ASA IPS Module.”
ASA CX
Yes No Chapter 1, “Configuring the ASA CX Module.”
NetFlow Secure Event Logging
filtering
Yes Ye s Chapter 1, “Configuring NetFlow Secure Event
Logging (NSEL).”
QoS input and output policing
Yes No Chapter 1, “Configuring QoS.”
QoS standard priority queue
Yes No Chapter 1, “Configuring QoS.”
QoS traffic shaping, hierarchical
priority queue
Yes Ye s Chapter 1, “Configuring QoS.”
TCP and UDP connection limits
and timeouts, and TCP sequence
number randomization
Yes Ye s Chapter 1, “Configuring Connection Settings.”
TCP normalization
Yes No Chapter 1, “Configuring Connection Settings.”
TCP state bypass
Yes No Chapter 1, “Configuring Connection Settings.”
User statistics for Identity
Firewall
Yes Ye s See the user-statistics command in the command
reference.

Cisco 5510 - ASA SSL / IPsec VPN Edition Specifications

General

Brand	Cisco
Model	5510 - ASA SSL / IPsec VPN Edition
Category	Firewall
Language	English