PrepAway - Latest Free Exam Questions & Answers

which two directions are the Cisco ASA modular policy framework inspection policies applied?

In which two directions are the Cisco ASA modular policy framework inspection policies applied?
(Choose two.)

PrepAway - Latest Free Exam Questions & Answers

A.
in the ingress direction only when applied globally

B.
in the ingress direction only when applied on an interface

C.
in the egress direction only when applied globally

D.
in the egress direction only when applied on an interface

E.
bi-directionally when applied globally

F.
bi-directionally when applied on an interface

Explanation:
http://www.cisco.com/en/US/docs/security/asa/asa83/configuration/guide/mpf_service_policy.html
#wp1162717
Feature Directionality
Actions are applied to traffic bidirectionally or unidirectionally depending on the feature. For
features that are applied bidirectionally, all traffic that enters or exits the interface to which you
apply the policy map is affected if the traffic matches the class map for both directions.
When you use a global policy, all features are unidirectional; features that are normally
bidirectional when applied to a single interface only apply to the ingress of each interface when
applied globally. Because the policy is applied to all interfaces, the policy will be applied in both
directions so bidirectionality in this case is redundant.


Leave a Reply