Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
The monitor-only is indeed for assessment purposes only; however, you will be able to test out the action taken by the sfr module without interrupting any network traffic.
In monitor-only mode the module receives a copy of the actual packet and takes...
You do not need a reboot for an Application detector. Make sure that the detector is activated once it has been added.
For more details, refer:
http://www.cisco.com/c/en/us/td/docs/security/firepower/60/configuration/guide/fpmc-config-guide-v60/Appli...
The sfr module on the ASA acts as an individual unit and the logging and action taken by it are completely separate.
The logging for the ACLs will show you information for the traffic matching that ACL, on the sourcefire you get details about the pac...
In the monitor-only mode the input packets are displayed as 0 which is expected.
For the DataplaneInterface not receiving any traffic error, please confirm if you are getting this error on the secondary ASA; if that is the case this is also expected...
