About Chess Norris

Chess Norris · 05-18-2026

Hello,Is there any posture features we miss if we want to do posture on RA VPN clients without ISE and instead use Hostscan and DAPs in the ASA? Are the same posture checks availible? I understand we also can get Advanced Endpoint Assessment for reme...

Chess Norris · 05-11-2026

Hi,I just noticed some elephant flows under security-related connection events. Is this correct? We have elephant flow detection enable, but I am not sure if they should be classified as Security-related and not just normal connection events?Thanks/C...

Chess Norris · 04-02-2026

Hi, I am migrating an ASA firewall to FTD for a customer and one of the things that need to be migrated is a QoS policy that limits the bandwidth for a number of VLAN:s that’s behind the ASAs inside interface. In the ASA the policy looks like th...

Chess Norris · 03-25-2026

Hello, I am trying to configure a QoS policy in FTD version 7.7 where I want to limit the bandwidth to10 Mbit/s both download and upload. The policy works but I don’t seem to be able to match it to a specific source IP address. Instead, it effects t...

Chess Norris · 02-23-2026

Hello, I have some issue sending LDAP request from a FTD 1010 device managed by FMC to an AD server over a VPN tunnel. I have already added the AD server as a Realm in the FMC and verify that the connection from the FMC to the AD Server works. Also, ...

Chess Norris · 05-11-2026

Thanks, so then I guess this is normal that those events get classified as security-related.Since this traffic is trusted I will bypass those elephant flows from the Snort inspection.

Chess Norris · 04-08-2026

Thanks Marvin, I will speak with the customer, and I agree this is properly a better approach. We could then do shaping instead of policing, which would be less aggressive.

Chess Norris · 04-07-2026

According to the customer the guest WiFi saturate his 1 Gbit/s Internet connection and he therefore want to make sure the WiFi guest not using more than 500 Mbit/s. He's been using the QoS policy sucessfully on the ASA before and whish to use the exa...

Chess Norris · 04-07-2026

The customer is hosting an event arena with lots of guest WiFi access, so that's why he want to limit the bandwith sometimes during special events.

Chess Norris · 04-05-2026

I've done simillair migrations in the past and you have two options. Either you can ask for a full backup of their FMC, but then you have to do a lot of cleaning afterwards to get rid of everything that doesn't belong to your firewall. What I have do...

Member Since	‎07-26-2010 08:21 PM
Date Last Visited	‎05-20-2026 04:45 AM
Posts	574
Total Helpful Votes Received	237

User Statistics

User Activity

VPN posture with or without ISE

Why are elephant flows classified as security-related connections?

Migrating ASA QoS policy to FTD

Issue with QoS policy in FTD

LDAP traffic initiated from a FTD over VPN tunnel not working

Re: Why are elephant flows classified as security-related connections?

Re: Migrating ASA QoS policy to FTD

Re: Migrating ASA QoS policy to FTD

Re: Migrating ASA QoS policy to FTD

Re: FMC migration