CSCvg08988 - Access Control Rule is not created in snort if source zone and destination zone are the same

[Edwin Matos]

A work around was to place a Prefilter this way it doesn't reach snort, and traffic will pass. I was affected with this with Anyconnect fulltunnel ( no split tunnel). Users were no able to use internet. After the pre-filter everything work as expected.

[Edwin Matos]

This work around is not longer needed. 

Firepower Management Center 6.2.2.2 Patch or 6.2.3 will fix this problem, but if you are unable to apply patch or upgrade then workaround is a good way to go.