PIX 7.X and service-policy

[mmelbourne]

When a service-policy is attached to an interface, for example, a policy which defines an outbound QoS policy, is the global-service-policy still in effect, or does it need to be merged with a user-specified policy. In other words, does an interface-specific policy override the global policy?

It not clear whether a specific policy type (QoS, inspect, IDS) is overridden or not. For example, does the default inspection policy still remains in place if only a specific QoS policy is attached to an interface?

[hemendoz]

Hello mmelbourne,

You asked"When a service-policy is attached to an interface, for example, a policy which defines an outbound QoS policy, is the global-service-policy still in effect"

No

"Does an interface-specific policy override the global policy?"

Yes

From the command reference

If an interface name is specified, the policy-map only applies to the interface. The interface name is defined in the nameif command, and an interface policy-map overrides a global policy-map. Only one policy-map is allowed per interface.

Only one global policy is allowed.

service-policy

http://www.cisco.com/univercd/cc/td/doc/product/multisec/asa_sw/v_70/cref_txt/s.htm#wp1498207

Hope that helps! If so, please rate.

Thanks,

hemendoz