topic Are you managed devices in Network Security

Cisco Sourcefire (Firesight) - Rate limit by application

andy_4578 — Tue, 12 Mar 2019 13:07:42 GMT

Hi,

Were looking to rate limit traffic on our SFR by application such as SharePoint Cloud. The release notes of SFR 6.1 state that it can do it as of this release but I cant find any documentation on how?

We've installed 6.1 and its up and running but having searched through the available options I cant find anywhere to rate limit.

Does anyone know how or are the release notes misleading?

Thanks

FirePOWER Management Center 6

Marvin Rhoads — Fri, 09 Sep 2016 02:27:53 GMT

FirePOWER Management Center 6.1 supports rate limiting with QoS policies for FirePOWER Threat Defense (FTD) devices only.

To perform policy-based rate limiting, configure and deploy QoS policies to managed devices. Reference the full FirePOWER Management Center 6.1 Configuration Guide:

http://www.cisco.com/c/en/us/td/docs/security/firepower/610/configuration/guide/fpmc-config-guide-v61.html

The html version seems to be missing some bits but if you download the full book in pdf format, you will see the details described in Chapter 36 beginning on Page 657.

Thanks for the reply Marvin.

andy_4578 — Tue, 13 Sep 2016 12:32:07 GMT

Thanks for the reply Marvin.

Are the QoS policies only available based on the license in Firepower? as I cant select any of the managed devices.

We only have "Classic" licenses

Are you managed devices

Marvin Rhoads — Tue, 13 Sep 2016 16:14:57 GMT

Are you managed devices running the new converged FTD image?

QoS policies will not work with classic FirePOWER image - no matter what license.

How do I tell if the ASA is

andy_4578 — Wed, 14 Sep 2016 08:16:59 GMT

How do I tell if the ASA is running the new converged FTD image?

The FirePower software is version 6.1.0-330 if that's it?

Very big disappointment for

jaksptr99 — Fri, 24 Feb 2017 02:23:44 GMT

Very big disappointment for firepower, get so many complains came from customers

license this, license that....

also, these devices cannot even do the most simple thing like rate limiting per AD user which can be done by another cheaper brands.

Losing some opportunities and active customers here.

Cisco better do something about this very soon.