cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
579
Views
0
Helpful
1
Replies

FMC: Inbound External IP Exclusions

Not applicable

Hello,

I need to exclude a few external inbound IPs from triggering Firepower alerts.

What is the best method to accomplish this:  Pass Rule, Access Control Policy - Trust, Whitelist..?

Thank You

Frank

1 Reply 1

Marvin Rhoads
Hall of Fame
Hall of Fame

Whitelist exempts the address that would otherwise be blacklisted by Security Intelligence.

Trust exempts it from even basic protocol conformance checks and essentially gives it a pass for all manner of tomfoolery.

It's generally better to exempt it from a specific policy/rule using a custom ACP rule while still allowing the other inspections to take place.

Review Cisco Networking products for a $25 gift card