About cpaquet

cpaquet · 11-29-2023

1. How can the FMC be configured so that managed devices will block files with cloud lookup disposition: Unavailable instead of letting the file go through while it's waiting for AMP Cloud connectivity to resume? 2. How does the firewall treat a file...

cpaquet · 08-04-2023

I was asked the following question. I think I know the answer, but would like to validate it. ======= Question: How many levels down of traffic tagged as tunneled by the prefilter can the Snort Engine analyze? ======= If traffic is identified as 'Tu...

cpaquet · 07-31-2023

Is there a way to rate limit the traffic generated by the FTD itself? Example: if VoIP is going through the Firewall, can we prioritize VoIP over the events traffic generated by the FTD itself? I'm familiar with the QoS feature of FTD which permit b...

cpaquet · 03-10-2022

What command needs to be added to the ASA, so the ASA passes the IP address it has assigned to a VPN client while using a Local IP address pool? I have assigned the local ASA VPN Pool in either Connection-Profile (Tunnel-Group) or in Group-Policy, bu...

cpaquet · 04-23-2021

where are captured files stored on FTD? What is the path to the directory to see them? Once on the directory, could the command file delete xxxx be used to delete them?I personally think that it's easier to manage capture via the UI, but need to kno...

cpaquet · 08-01-2023

@MHM Cisco World : Rob is not confused. He understand perfectly my original question which is: how can we throttling the traffic generated by FTD itself. This is considered traffic 'to/from' the firewall, and not traffic through the firewall.

cpaquet · 08-01-2023

Hi Rob, excellent suggestion to use syslog rate limit, if throttling for FTD 'self-traffic' is not available.

cpaquet · 08-01-2023

Good point. Thanks.

cpaquet · 08-01-2023

Example: In a data center (clustering, LISP, etc), where you are doing extension FTD logging to the FMC, but also you have multiple critical user applications. How would you configured the FTD to give precedence to user applications if there is cont...

cpaquet · 08-01-2023

Could you expand on the built-in control plane mechanisms in FTD to prevent overloading the system? A more drastic approach, which would not be useful, but does provide strict control-plane control is using FlexConfig with the access-group xxxx cont...

Member Since	‎08-05-2003 04:26 PM
Date Last Visited	‎01-12-2024 12:06 AM
Posts	104
Total Helpful Votes Received	31

User Statistics

User Activity

How can FTD block file with Cloud lookup disposition: Unavailable?

Firepower Prefilter tunneled traffic

Rate limiting FTD's own traffic

ISE + ASA VPN: How to see VPN Pool address in ISE Live Logs?

Capture files on FTD itself

Re: Rate limiting FTD's own traffic

Re: Rate limiting FTD's own traffic

Re: Rate limiting FTD's own traffic

Re: Rate limiting FTD's own traffic

Re: Rate limiting FTD's own traffic