FTD performance Optimization

[Chess Norris]

Hi,

I'm looking for documentation with general tips on how to optimize FTD performance like using prefilter for trusted traffic, disable inspection on encrypted traffic etc.

I'm working with a customer that have performance issues a few days every year due to high volume of files being traversing the firewall.

All other days of the year, the traffic is only about 5-10% of the firewall capacity and the customer does not have the budget to upgrade to bigger models at the moment. (They have FTD 2130 now)

Thanks

/Chess

[MHM Cisco World]

https://www.cisco.com/c/en/us/td/docs/security/firepower/623/configuration/guide/fpmc-config-guide-v623/intelligent_application_bypass.html

MHM

[Marvin Rhoads]

There are some good high level best practices described here: https://secure.cisco.com/secure-firewall/v7.2/docs/access-control-policy

[Chess Norris]

Thanks @MHM Cisco World & @Marvin Rhoads I will have a look at those.

/Chess