Excluding Specific Traffic from Firepower Inspection

Samechine — Sat, 07 Dec 2024 01:33:49 GMT

Hello,

Regarding the ASA5525 with the FirePower module I am using, the following configuration exists in the service policy rules:

-------------

class-map Internal-class
match any

policy-map Internal-policy
class Internal-class
sfr fail-open

service-policy Internal-policy interface Internal

---------

I believe all traffic passing through the Internal interface is being inspected by Firepower. However, I would like to configure it so that specific traffic is excluded from Firepower inspection.

To achieve this, I attempted to add a rule to the Internal Policy in the ASDM's Service Policy Rules. I defined a class to specify the traffic but wasn’t sure what to configure under "Rule Actions."

I proceeded without setting any Rule Actions, but it didn’t work as expected.

Could you provide some advice?

Best regards,

Re: Excluding Specific Traffic from Firepower Inspection

MHM Cisco World — Sat, 07 Dec 2024 01:54:06 GMT

https://integratingit.wordpress.com/2022/06/11/asa-firepower-module/

Check this'

What you need is add line under class deny specific traffic from pass through sfr

MHM

topic Excluding Specific Traffic from Firepower Inspection in Network Security

Excluding Specific Traffic from Firepower Inspection

Re: Excluding Specific Traffic from Firepower Inspection