I've got a firepower going. The policy has pure access rules.
Now I have a very high CPU load with active traffic.
See pictures
What I do not understand is why SNORT has so much CPU.
I have pure Access Rulles and no inspection rules
When I look at the Connection Events and click on Snort ID Filter I see all the traffic
Why does he show up at Snort Modul?
