which cisco asa feature enables the asa to do these two things?