Firepower Recommended Rules

[fatalXerror]

Hi, 

I am just wondering, does my base policy such as Connectivity over Security intrusion rule will be in use if I generate and use Firepower Recommended Rules in my Intrusion Policy?

Thanks

[Mohammed al Baqari]

It will be used as base-line (including signature and advanced settings)
but signatures will be customized based on recommendation, i.e. some of the
signatures will be disabled based your environment to avoid unnecessary
rule being verified.

[fatalXerror]

Understand that but does every traffic that passes to the IPS will it use the Firepower recommended rules instead of the base intrusion policy? Thanks.

[rsharp001]

The base policy (connectivity over security) will still be in affect but the policies will be adjusted based on the recommended rules.  Firepower recommended rules are enabled/disabled based on the hosts, applications and protocols that have been discovered through network discovery