I have two queries: First -
We have an FWSM in 6500 with FW OS 3.2(12). It allows only 1 vlan (SVI) to assign to firewall vlan-group. If I want to assign more than 1 vlan, I need to add this command "firewall multiple-vlan-interfaces". The document says, if I add this command, traffic will bypass FWSM. We have around 40 vlan's to assign for inside interface. Any suggestion for this issue?
Second - I assigned 2 VLAN's to FWSM by enabling multiple-vlan-interfaces, configured inside & outside and added ACL ip any any to both interfaces. Traffic is passing thru both interfaces & packet count is increasing, but ACL hit count remains at zero. Any suggestion why it is happening?
Thanks in advance for your advice.