I have implemented a new ASA 5506 running 9.9. I have these interfaces:
*interface outside-ip address by dhcp and its the default route, security=0
*interface inside 1-ip network vlan1 10.0.0.0/24, security=100
*sub interface inside 1.2-ip network...