cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
11435
Views
30
Helpful
24
Replies

cisco Asa firepower traffic rate limiting

susim
Level 3
Level 3

Hi 

Does cisco Asa firepower supports url filtering and traffic rate limiting ?

Thanks

24 Replies 24

Marvin Rhoads
Hall of Fame
Hall of Fame

URL Filtering is possible. Advanced features are enabled when you have the URL license. Reference.

You cannot rate limit outbound traffic using the FirePOWER module but you you can perform rate-based attack prevention. Reference.

Hi

 

So how can we do the  traffic shaping ?

Thanks

 

If you need to do traffic shaping, you would create a policy on the base ASA, not on the FirePOWER module.

Here's a guide for doing that.

So how can we do the layer7 traffic shaping?

Thanks

Well..  you can't do true L7 traffic shaping today in a ASA/Firepower combination.. You need something else.. like Meraki..

As per our Cisco Security CSE, L7 shaping/policing (QoS) and Time-based will be available into Firepower/Firesight 6.1 release...

 

My guest, should be available in 2016...

 

 

 

Any news on this?

It's not available as of the current 6.0.1.

Please watch the release notes for future updates.

http://www.cisco.com/c/en/us/support/security/asa-firepower-services/products-release-notes-list.html

http://www.cisco.com/c/en/us/support/security/defense-center/products-release-notes-list.html

Hehe, thanks, better go for Fortinet :P

Hi Marvin,

Do you know any ETA of the Layer 7 traffic shaping feature ?

Best regards,

Marcin

We hope for it in 6.1 (Summer 2016) but it won't be confirmed until released.

Thanks Marvin.

I got internal note from Cisco Security SE, and 6.1 should include rate-limiting and other new features like SITE-TO-SITE VPN, Shared NAT...

6.1 should be available July 2016.

Thanks,

Dominic.

Thanks for the update Dominic.

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: