Default Configuration - Cisco ASA 5505 Configuration Manual

Asa 5500 series

Hide thumbs Also See for ASA 5505:

Table of Contents

Configuring a Service Policy

This limit also includes default traffic classes of all types. See the

Service Policy Guidelines

Default Settings

The following topics describe the default settings for Modular Policy Framework:

Default Configuration

By default, the configuration includes a policy that matches all default application inspection traffic and

applies certain inspections to the traffic on all interfaces (a global policy). Not all inspections are enabled

by default. You can only apply one global policy, so if you want to alter the global policy, you need to

either edit the default policy or disable it and apply a new one. (An interface policy overrides the global

policy for a particular feature.)

The default policy includes the following application inspections:

Interface service policies take precedence over the global service policy for a given feature. For

example, if you have a global policy with FTP inspection, and an interface policy with TCP

normalization, then both FTP inspection and TCP normalization are applied to the interface.

However, if you have a global policy with FTP inspection, and an interface policy with FTP

inspection, then only the interface policy FTP inspection is applied to that interface.

You can only apply one global policy. For example, you cannot create a global policy that includes

feature set 1, and a separate global policy that includes feature set 2. All features must be included

in a single policy.

Default Configuration, page 29-7

Default Traffic Classes, page 29-8

DNS inspection for the maximum message length of 512 bytes

Skinny (SCCP)

"Default Traffic Classes" section on

Cisco ASA 5500 Series Configuration Guide using ASDM

Default Settings

Show Quick Links

Table of Contents

Asa 5510 Asa 5540 Asa 5520 Asa 5550 Asa 5580