Cisco Asdm 7 User Guide

 
1-15
Cisco ASA Series Firewall ASDM Configuration Guide
 
Chapter 1      Configuring a Service Policy
  Managing the Order of Service Policy Rules
Specify the address and subnet mask using prefix/length notation, such as 10.1.1.0/24. If you 
enter an IP address without a mask, it is considered to be a host address, even if it ends with a 0.
Enter any to specify any destination address.
Separate multiple addresses by a comma.
d.In the Service field, enter an IP service name or number for the destination...

 
1-16
Cisco ASA Series Firewall ASDM Configuration Guide
 
Chapter 1      Configuring a Service Policy
  Managing the Order of Service Policy Rules
If the packet matches a subsequent rule for a different feature type, however, then the ASA also 
applies the actions for the subsequent rule.
For example, if a packet matches a rule for connection limits, and also matches a rule for application 
inspection, then both rule actions are applied.
If a packet matches a rule for application inspection, but also...

 
1-17
Cisco ASA Series Firewall ASDM Configuration Guide
 
Chapter 1      Configuring a Service Policy
  Feature History for Service Policies
Feature History for Service Policies
Ta b l e 1 - 3 lists the release history for this feature.
Table 1-3 Feature History for Service Policies
Feature Name Releases Feature Information
Modular Policy Framework 7.0(1) Modular Policy Framework was introduced.
Management class map for use with RADIUS 
accounting traffic7.2(1) The management class map was introduced...

 
1-18
Cisco ASA Series Firewall ASDM Configuration Guide
 
Chapter 1      Configuring a Service Policy
  Feature History for Service Policies 

CH A P T E R
 
2-1
Cisco ASA Series Firewall ASDM Configuration Guide
 
2
Configuring Special Actions for Application 
Inspections (Inspection Policy Map)
Modular Policy Framework lets you configure special actions for many application inspections. When 
you enable an inspection engine in the service policy, you can also optionally enable actions as defined 
in an inspection policy map. When the inspection policy map matches traffic within the service policy 
for which you have defined an inspection...

 
2-2
Cisco ASA Series Firewall ASDM Configuration Guide
 
Chapter 2      Configuring Special Actions for Application Inspections (Inspection Policy Map)
  Guidelines and Limitations
policy map is that you can create more complex match criteria and you can reuse class maps. 
However, you cannot set different actions for different matches. Note: Not all inspections support 
inspection class maps.
Parameters—Parameters affect the behavior of the inspection engine.
Guidelines and Limitations
HTTP inspection...

 
2-3
Cisco ASA Series Firewall ASDM Configuration Guide
 
Chapter 2      Configuring Special Actions for Application Inspections (Inspection Policy Map)
  Defining Actions in an Inspection Policy Map
NoteThere are other default inspection policy maps such as _default_esmtp_map. For example, an ESMTP 
inspection rule implicitly uses the policy map “_default_esmtp_map.”
Defining Actions in an Inspection Policy Map
When you enable an inspection engine in the service policy, you can also optionally enable...

 
2-4
Cisco ASA Series Firewall ASDM Configuration Guide
 
Chapter 2      Configuring Special Actions for Application Inspections (Inspection Policy Map)
  Where to Go Next
Step 4Follow the instructions for your inspection type in the inspection chapter.
Where to Go Next
To use an inspection policy, see Chapter 1, “Configuring a Service Policy.”
Feature History for Inspection Policy Maps
Ta b l e 2 - 1 lists the release history for this feature.
Table 2-1 Feature History for Service Policies
Feature Name...

 
PART 2
Configuring Network Address Translation