Firepower 2100 - Max ACL Limits

[alexgamarano]

I need to know what is the maximum fo ACE (ACL entries) into the Firepower 2100.

Could someone help me?

[AndreaTornaghi]

Dear, I don't think that there is a standard ACL maximum limit.

It could depend on which type of policy are you using, prefilter policy (L3-L4) or standard access policy (L3-L7), and which features you are enabling (IPS, AMP, SSL inspection).

In base of the type of policy and feature your FTD will consume different CPU and RAM resources.

[askaerr]

See Cisco Live BRKSEC-3455 (https://www.ciscolive.com/c/dam/r/ciscolive/emea/docs/2020/pdf/BRKSEC-3455.pdf): Max Recommended AC element count limit is 50k for FPR 2110. You can find the recommendations for all hardware models in the presentation.

Kr,

A

[Abheesh Kumar]

Hi,

https://www.ciscolive.com/c/dam/r/ciscolive/emea/docs/2020/pdf/BRKSEC-3455.pdf

HTH

Abheesh