topic You can do that, but not in Network Security

NGFW

#TCN — Tue, 12 Mar 2019 07:05:50 GMT

Do you know if there is the ability to route traffic based on application type on ASA NGFW with Firepower? - I know we can inspect application data but can we do more when we know what the application is?

e.g. 2 x internet connections, based on "application type" route via ISP1 or ISP2 .....effectively route non critical traffic via ISP1 (Facebook,web and critical traffic via ISP 2.

Cheers
James

No, you can not do this. You

Philip D'Ath — Mon, 04 Jan 2016 13:34:38 GMT

No, you can not do this. You can only route based on the destination address, which will sometimes do the trick.

You need a router and PBR to do this.

Many thanks for your response

#TCN — Mon, 04 Jan 2016 13:47:10 GMT

Many thanks for your response

Regards,

James

You can do that, but not

Karsten Iwen — Mon, 04 Jan 2016 14:54:25 GMT

You can do that, but not inside of FirePOWER. Routing is purely done on the ASA and there you have PBR available. With that you can send traffic based on the destination-port out of a particular link. You can find more info on PBR in the config-guide.