Santos:CCNA Sec 210-260 OCG

Modular Policy Framework

For IOS ZBFs, class maps are used to identify traffic, policy maps are used to implement actions on that traffic, and the application of those policies is done with the service policy commands. On the IOS router, all of these features included the keywords inspect to differentiate them from normal class maps and policy maps and service policies.

On the ASA, you also use class maps to identify traffic, policy maps to identify the actions you are going to take on that traffic, and service policy commands to implement the policy. The service policies can attach the policy to a specific interface or can be applied globally, which would affect all interfaces on the ASA. One way to use the Modular Policy Framework (MPF) is ...