Question about Trust and SI in FTD

[FredrikW73]

You can Trust traffic in the Access Controll Policy rather than Allowing it.

Is trusted traffic still subject to Security Intelligence checks and blocking?

[Marvin Rhoads · Accepted solution]

Yes it is - SI checks come before the ACP in the order of operations. Only if you fastpath the traffic in your preflter policy would it skip SI (and indeed all of the Snort subsystem).