Cisco ASA 5505 Configuration Manual page 606

Licensing Requirements for Service Policies
For example, if HTTP traffic matches a policy on the inside interface to inspect HTTP traffic, and you
have a separate policy on the outside interface for HTTP inspection, then that traffic is not also inspected
on the egress of the outside interface. Similarly, the return traffic for that connection will not be
inspected by the ingress policy of the outside interface, nor by the egress policy of the inside interface.
For traffic that is not treated as a flow, for example ICMP when you do not enable stateful ICMP
inspection, returning traffic can match a different policy map on the returning interface. For example, if
you configure IPS on the inside and outside interfaces, but the inside policy uses virtual sensor 1 while
the outside policy uses virtual sensor 2, then a non-stateful Ping will match virtual sensor 1 outbound,
but will match virtual sensor 2 inbound.
Licensing Requirements for Service Policies
Model License Requirement
All models Base License.
Guidelines and Limitations
This section includes the guidelines and limitations for this feature.
Context Mode Guidelines
Supported in single and multiple context mode.
Firewall Mode Guidelines
Supported in routed and transparent firewall mode.
IPv6 Guidelines
Supports IPv6 for the following features:
•
•
•
•
•
•
Traffic Class Guidelines
The maximum number of traffic classes of all types is 255 in single mode or per context in multiple
mode. Class maps include the following types:
•
•
•
•
Cisco ASA 5500 Series Configuration Guide using ASDM
29-6
Application inspection for FTP, HTTP, ICMP, SIP, SMTP and IPSec-pass-thru
IPS
NetFlow Secure Event Logging filtering
TCP and UDP connection limits and timeouts, TCP sequence number randomization
TCP normalization
TCP state bypass
Layer 3/4 class maps (for through traffic and management traffic)
Inspection class maps
Regular expression class maps
match commands used directly underneath an inspection policy map
Chapter 29 Configuring a Service Policy
OL-20339-01