Hello,
Regarding the ASA5525 with the FirePower module I am using, the following configuration exists in the service policy rules:
-------------
class-map Internal-class
match any
policy-map Internal-policy
class Internal-class
sfr fail-open
service-policy Internal-policy interface Internal
---------
I believe all traffic passing through the Internal interface is being inspected by Firepower. However, I would like to configure it so that specific traffic is excluded from Firepower inspection.
To achieve this, I attempted to add a rule to the Internal Policy in the ASDM's Service Policy Rules. I defined a class to specify the traffic but wasn’t sure what to configure under "Rule Actions."
I proceeded without setting any Rule Actions, but it didn’t work as expected.
Could you provide some advice?
Best regards,
