I have a several ASAs converted to FTD, and I have enabled the latency rules 134:1 and 134:2 and I see several events generated .
I am not sure what happens to traffic once a rule is suspended. So, my question is:
If one rule is suspended because the latency threshold has been reached and the action for that rule is: allow, what would happen?
1. Traffic that should match that rule, does not match because it is suspended, and goes to the Default Action because does not match any other rule.
2. Traffic matches the rule, it is allowed, but it is not inspected.
3. None of the above.
Solved! Go to Solution.