cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements

218
Views
0
Helpful
0
Replies

Identify flows that are triggering Automatic Application Bypass (AAB)

Hello,

 

we have a bunch of ASA firewalls with FirePOWER modules and we recently upgraded them to a latest 6.2 version of code.

 

I have been getting some AAB (Automatic Application Bypass) related health events and i was wondering if there is a way, through the CLI to identify elephant flows that are triggering AAB. I remember that about a year ago we experienced some slowness on our network (caused by latency on the SFR module on our Data Center Firewall) but because the module was on 5.4 and IAB/AAB was not available, TAC wasn't able to identify the flows that are causing this (so that we bypass them on the ASA level -> not send the traffic to the module).

 

I believe there are ways so that you can get flow data for when AAB is kicking in.