Cisco ASA 5506-X Configuration Manual page 19

Chapter 1 Service Policy Using the Modular Policy Framework
Step 4 Determine on which interfaces you want to apply the policy map, or apply it globally, as described in
Apply Actions to an Interface (Service Policy), page
Identify Traffic (Layer 3/4 Class Maps)
A Layer 3/4 class map identifies Layer 3 and 4 traffic to which you want to apply actions. You can create
multiple Layer 3/4 class maps for each Layer 3/4 policy map.
•
•
Create a Layer 3/4 Class Map for Through Traffic
A Layer 3/4 class map matches traffic based on protocols, ports, IP addresses and other Layer 3 or 4
attributes.
We suggest that you only inspect traffic on ports on which you expect application traffic; if you inspect
Tip
all traffic, for example using match any, the ASA performance can be impacted.
Layer 3/4 Policy Map
Connection Limits
Inspection
IPS
Create a Layer 3/4 Class Map for Through Traffic, page 1-13
Create a Layer 3/4 Class Map for Management Traffic, page 1-15
Connection Limits
Inspection
1-18.
Cisco ASA Series Firewall CLI Configuration Guide
Configure Service Policies
Service Policy
1-13