topic Hi Dinkar,Thanks for the in Network Security

Bypass mode in Sourcefire Firepower cluster

harshadsstsi — Tue, 12 Mar 2019 12:47:31 GMT

Hi,

How to enable software bypass on clustered firepower 8350 devices.

Sometime during troubleshooting we need to bypass IPS for test-traffic. How to achieve this without physical cabling changes/switch config changes.

I see Access Control rule with Trust rule can also be used. need more information on software bypass option though.

Thanks

You are on the right track.

Dinkar Sharma — Tue, 20 Oct 2015 20:27:04 GMT

You are on the right track. If you create a rule with action as "Trust" traffic won't be sent to the inspection engine for analysis and would be simply allowed.

Thanks,

Dinkar

Hi Dinkar,Thanks for the

harshadsstsi — Wed, 21 Oct 2015 06:25:11 GMT

Hi Dinkar,

Thanks for the confirmation.

Can the below mentioned software bypass command be used for Clustered Firepower devices ;

configure bypass open <inetrface>

Yes, you can use that.Opens

Dinkar Sharma — Fri, 23 Oct 2015 18:07:38 GMT

Yes, you can use that.

Opens or closes the bypass mode of an inline pair. This command is not available on virtual devices and ASA FirePOWER devices.

configure bypass {open | close} {interface}

where interface is the name of either hardware port in the inline pair.

Example

> configure bypass open s1p1

Hi, You cannot configure

Aastha Bhardwaj — Fri, 23 Oct 2015 18:13:55 GMT

Hi,

You cannot configure bypass mode for inline sets on clustered devices,

Regards,

Aastha

Rate if that helps!!!

Hi Dinkar,

Sinhara Prasad Silva — Sat, 09 Jan 2016 23:47:07 GMT

Hi Dinkar,

1) i need to upgrade software on 8350 sensor. can i type "configure bypass open s1p1" on one of the interface of each inline pair ( i have 5 inline sets) so i can upgrade the sensor and reboot without effective live traffic. ?

2) hope if i enable "configure bypass open s1p1" on one of the interface of inline set , IPS policy will not block all traffic and by pass traffic.

Thanks

I have the same issue.

John — Sun, 07 Feb 2016 02:03:28 GMT

I have the same issue.

1) i need to upgrade software on 8120 and 7120 sensor. we need to type "configure bypass open s1p1" on one of the interface of each inline pair ( i have 5 inline sets) so i can upgrade the sensor and reboot without effective live traffic. ?

2) hope if i enable "configure bypass open s1p1" on one of the interface of inline set , IPS policy will not block all traffic and by pass traffic.