Cisco Cisco Firepower Management Center 4000

Cisco provides several features for improving the performance of your system as it analyzes traffic for 
attempted intrusions. See the following sections for more information:

 describes how you can specify the number of packets to 

allow in the event queue, and enable or disable inspection of packets that will be rebuilt into larger 
streams.

 describes how you can balance security 

with the need to maintain device latency at an acceptable level with packet latency thresholding.

 describes how you can balance security with 

the need to maintain device latency at an acceptable level with rule latency thresholding.

 describes how you can configure the basic 

parameters of how your managed devices monitor and report on their own performance.

 describes how you can override default match and 

recursion limits on PCRE regular expressions.

 describes how you can configure rule processing event 

queue settings.

Protection

You can specify the number of packets to allow in the event queue, and enable or disable, before and 
after stream reassembly, inspection of packets that will be rebuilt into larger streams.

Admin/Intrusion Admin

Select 

The Intrusion Policy page appears.

Click the edit icon (

) next to the policy you want to edit.

If you have unsaved changes in another policy, click 

 to discard those changes and continue. See 

 for information on saving unsaved changes in another 

policy.