FTD 6.5 Flexconfig

[Sheraz.Salim]

I was testing FMC 6.5 with FTD 6.5. I need to set up an tcp advanced option by pass. below command does not work as we use them in ASA.

class-map tcp_bypass
match access-list $TCP_Bypass
policy-map tcp_bypass_policy
class tcp_bypass
set connection random-sequence-number disable
set connection advanced-options tcp-state-bypass
service-policy tcp_bypass_policy interface Inside_Interface

after spending some time find a bug CSCvn14995. in this bug it say known issue in version 6.2.3. but i noticed this issue in 6.5 too.

to fix the issue you have to change the commands slightly.

class-map tcp_bypass
match access-list $tcp_bypass
policy-map tcp_bypass_policy
class tcp_bypass
set conn random-sequence-number disable
set conn advanced-options tcp-state-bypass
service-policy tcp_bypass_policy interface Inside_Interface

hope this will help others.