Cisco Cisco Firepower Management Center 4000

Admin/Network Admin

Select 

.

The Device Management page appears.

Next to the device where you want to add a fast-path rule, click the edit icon (

).

The Interfaces tab for that device appears.

Click 

.

The Devices tab appears.

Next to the 

 section, click the edit icon (

).

The Advanced pop-up window appears.

Click 

 to add a fast-path rule.

The New IPv4 Rule pop-up window appears.

From the 

 drop-down list, select an inline set or passive security zone. See 

 for more information.

Use CIDR notation in the 

 and the 

 fields to designate the IP addresses of initiators or 

responders whose packets should bypass further analysis.

Your rule matches packets from the designated initiators or packets to the designated responders. For 
information on using CIDR notation in the FireSIGHT System, see 

.

Optionally, from the 

 drop-down list, select the protocol on which you want the rule to act or 

select 

 to match traffic from any protocol on the list.

Optionally, if you chose the TCP or UDP protocol in step 

, enter initiator and responder ports in the 

and the 

fields to designate ports.

You can enter a comma-separated list of port numbers in each rule. You cannot use port ranges in IPv4 
fast-path rules. Note that a blank port value is treated as 

.

If you also select the 

option, your filter criteria are narrowed to packets from those initiator 

ports or packets to those responder ports.

Optionally, enter a VLAN ID in the 

field.

Your rule matches only traffic for that VLAN. Note that a blank VLAN value is treated as 

.

Optionally, select the 

 option to filter all traffic traveling between the specified initiator and 

responder IP addresses. Clear the option to filter only traffic from the specified initiator IP address to the 
specified responder IP address.

Click 

. 

The rule is added under Fast-Path Rules in the Advanced pop-up window. Although the rule is added, 
you must click 

 again to save the rule. Note that your changes do not take effect until you apply the 

device configuration; see 

 for more information.