ASA Service-Policy for FirePOWER inline mode

[GRANT3779]

Hi CSC,

When applying a service-policy within ASA for traffic being sent to the FirePOWER module, should this be applied to all interfaces within a bridge group. See attached picture for example setup which has a Steelhead also.

Is there any need to assign the service-policy to all 4 Interfaces? e.g Gi0/0 through to Gi0/4? How exactly is the service_policy processed? Traffic flowing inbound? or Inbound/Outbound?

[Kanwaljeet Singh]

Hi Grant,

ciscoasa1(config)# service-policy global_policy ?

configure mode commands/options:
  global     Enter this keyword to specify a global policy
  interface  Enter this keyword to specify an interface policy

Normally bu default you have service-policy global_policy global which means it is applied to all the interfaces. But you do have the choice to create one for specific interface/s.

Hope that answers your question.

Regards,

Kanwal

Note: Please mark answers if they are helpful.