Policy documents

[Stewart Amos]

HI All, Does anyone have any example FTD on 9k policy development documentation that they can share?

[ananmath]

Do you mean REST based policy ?

[Stewart Amos]

Not entirely sure.  My customer is warming up some  9ks running FTD and they are interested in best practice in terms of building new policy docs (and to avoid reinventing the wheel).  I guess the aim is see whats out here and maybe select the most appropriate for their needs, tune it accordingly and use it.  Sorry if this is a little vague

[Raghunath Kulkarni]

How rules are handled and stored in the sensor when policy deploy happens  can be referred in the link:

Though it is not best practise document but gives a insight on how rules can impact the performance and how they are processed.

https://www.cisco.com/c/en/us/support/docs/security/firepower-ngfw/200522-Understand-the-Rule-Expansion-on-FirePOW.html

[Stewart Amos]

Thanks Raghunath,

This is great info.

Many thanks

Stew