https://community.cisco.com/t5/network-security/prefilter-access-control-with-vpn-s/m-p/3688049#M1005491 <P>Thanks for the answer Mikael</P> <P>&nbsp;</P> <P>Best regards!</P> Tue, 14 Aug 2018 13:31:12 GMT Ariel0092 2018-08-14T13:31:12Z https://community.cisco.com/t5/network-security/prefilter-access-control-with-vpn-s/m-p/3675351#M1005489 <P>Hi everyone i have a doubt with the prefilter acl's that i would like you to clarify me. I have an FTD 6.2.3 running L2L and RA VPN, and the FTD is the terminal endpoint of theese vpn's,no a passthrough tunnel, and i want to filter individual connections of theese tunnels with no further inspection, so my question is i have to apply a prefilter rule or a tunnel rule? Becouse for my understanding on theese filters is that the tunnel rules applys for tunnels passing trhough the FTD, is that correct?&nbsp;</P> <P>&nbsp;</P> <P>Thanks and best regards.</P> Tue, 12 Mar 2019 13:51:05 GMT https://community.cisco.com/t5/network-security/prefilter-access-control-with-vpn-s/m-p/3675351#M1005489 Ariel0092 2019-03-12T13:51:05Z https://community.cisco.com/t5/network-security/prefilter-access-control-with-vpn-s/m-p/3685166#M1005490 Hi,<BR /><BR />Yes you are correct, you should use pre-filter for tunnels that terminates on the device.<BR />Tunnel rules are used for example GRE tunnels that pass through the device.<BR /><BR />br, Mikael Thu, 09 Aug 2018 16:43:06 GMT https://community.cisco.com/t5/network-security/prefilter-access-control-with-vpn-s/m-p/3685166#M1005490 mikael.lahtela 2018-08-09T16:43:06Z https://community.cisco.com/t5/network-security/prefilter-access-control-with-vpn-s/m-p/3688049#M1005491 <P>Thanks for the answer Mikael</P> <P>&nbsp;</P> <P>Best regards!</P> Tue, 14 Aug 2018 13:31:12 GMT https://community.cisco.com/t5/network-security/prefilter-access-control-with-vpn-s/m-p/3688049#M1005491 Ariel0092 2018-08-14T13:31:12Z