ASA issue - policy map

[tprochazka]

Please do somebody know - if I adjust in policy map on ASA two classes - first for specific ip addressess (for which I dont want H323 inspection) and second global-all addresses all inspections. It means that packets from first rule will also conform to second rule. What is the processing order of these classes in policy-map about? It takes it gradually like access-list?

[Farrukh Haroon]

Only the first class-map is evaluated for 'each' feature type in a Layer3/4 Policy-Map. You can verify this via a 'show service-policy ... ' command.

http://www.cisco.com/en/US/docs/security/asa/asa80/configuration/guide/mpc.html#wp1116212

Regards

Farrukh