I found on "Firepower Management Center Device Configuration Guide", says for non-IPsec endpoints, you should disable the maximum TCP MSS on the Firepower Threat Defense device.
If I am running IPsec tunnels on my FTD, How can we achieve disabling maximum TCP MSS only for non-IPsec endpoints? I know how to disable it in its entirety using flexconfig "no sysopt connection tcpmss xxxx"