Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
Hello,A customer have a vFTD in production and he also have a 1140 appliance that are currently not in use.He now wants to shut down the virtual FTD and move everything to the 1140 and he have asked me about the licenses that they currently use on th...
Hello,Is there any posture features we miss if we want to do posture on RA VPN clients without ISE and instead use Hostscan and DAPs in the ASA? Are the same posture checks availible? I understand we also can get Advanced Endpoint Assessment for reme...
Hi,I just noticed some elephant flows under security-related connection events. Is this correct? We have elephant flow detection enable, but I am not sure if they should be classified as Security-related and not just normal connection events?Thanks/C...
Hi,
I am migrating an ASA firewall to FTD for a customer and one of the things that need to be migrated is a QoS policy that limits the bandwidth for a number of VLAN:s that’s behind the ASAs inside interface.
In the ASA the policy looks like th...
Hello,
I am trying to configure a QoS policy in FTD version 7.7 where I want to limit the bandwidth to10 Mbit/s both download and upload.
The policy works but I don’t seem to be able to match it to a specific source IP address. Instead, it effects t...
Thanks, so then I guess this is normal that those events get classified as security-related.Since this traffic is trusted I will bypass those elephant flows from the Snort inspection.
Thanks Marvin, I will speak with the customer, and I agree this is properly a better approach. We could then do shaping instead of policing, which would be less aggressive.
According to the customer the guest WiFi saturate his 1 Gbit/s Internet connection and he therefore want to make sure the WiFi guest not using more than 500 Mbit/s. He's been using the QoS policy sucessfully on the ASA before and whish to use the exa...