https://community.cisco.com/t5/network-security/5516-on-ftd/m-p/3390473#M956672 <P>Hi CSC,</P> <P>&nbsp;</P> <P>When installing FTD on a 5516 ASA, is the traffic flow the same as it would be when the firewall was running Traditional ASA software and the FirePOWER software separately?</P> <P>&nbsp;</P> <P>In the past when running ASA with FirePOWER, we would send traffic to SFR via policy-map. How is this done in the ASA when it runs FTD?</P> Fri, 21 Feb 2020 15:49:17 GMT GRANT3779 2020-02-21T15:49:17Z https://community.cisco.com/t5/network-security/5516-on-ftd/m-p/3390473#M956672 <P>Hi CSC,</P> <P>&nbsp;</P> <P>When installing FTD on a 5516 ASA, is the traffic flow the same as it would be when the firewall was running Traditional ASA software and the FirePOWER software separately?</P> <P>&nbsp;</P> <P>In the past when running ASA with FirePOWER, we would send traffic to SFR via policy-map. How is this done in the ASA when it runs FTD?</P> Fri, 21 Feb 2020 15:49:17 GMT https://community.cisco.com/t5/network-security/5516-on-ftd/m-p/3390473#M956672 GRANT3779 2020-02-21T15:49:17Z https://community.cisco.com/t5/network-security/5516-on-ftd/m-p/3391054#M956673 <P>An FTD appliance (on ASA or on Firepower hardware or virtual) follows a different order of operations. FTD has a unified image so there's not separation of ASA and FTD image bits.</P> <P>&nbsp;</P> <P>Under the covers, you still have the firewall engine (Lina) and the presence of L3/4 ACLs in it. You have the option to bypass the Firepower engine (Snort etc.) via prefilter policy with Fastpath rules.</P> Wed, 30 May 2018 08:07:15 GMT https://community.cisco.com/t5/network-security/5516-on-ftd/m-p/3391054#M956673 Marvin Rhoads 2018-05-30T08:07:15Z