Hmm. How would you go about making sure that occured. We have a network module in the router along with the AIM-IPS. I am assuming we would only want to inspect traffic that was coming in on the ethernet interface before the waas saw it like you said.
Otherwise, could you write a rule in the AIM-IPS not to inspect traffic that was marked with the IP option that the WAEs use for autodiscovery?
What do you think the best way to approach this would be?
