topic Re: FTD prefilter policy in Network Security

FTD prefilter policy

peterhw — Fri, 21 Feb 2020 15:36:42 GMT

Does prefilter policy in FTD support stateful inspection ? or I have to created two rules for outgoing and return traffic.

Re: FTD prefilter policy

Mohammed al Baqari — Mon, 09 Apr 2018 06:20:02 GMT

If supports stateful. Once the connection is created and matching prefilter
it will be flagged in statetable. Return packets matching this connection
won't be punted to snort engine

Re: FTD prefilter policy

peterhw — Tue, 10 Apr 2018 05:30:12 GMT

Refer to https://www.cisco.com/c/en/us/td/docs/security/firepower/610/configuration/guide/fpmc-config-guide-v61/prefiltering_and_prefilter_policies.html , FTD prefilter policy is unidirectional, how to explain it ?

Re: FTD prefilter policy

Mohammed al Baqari — Tue, 10 Apr 2018 08:40:42 GMT

If my understanding is correct this is related to traffic initiation not
stateful. Being stateful doesn't mean that you are bidirectional.