Cisco Cisco Firepower Management Center 4000

When you enable the 

 detection setting, the system ignores the VLAN header so 

packets can be correctly processed for your deployment.

Admin/Intrusion Admin

Select 

The Intrusion Policy page appears.

Click the edit icon (

) next to the policy you want to edit.

If you have unsaved changes in another policy, click 

 to discard those changes and continue. See 

 for information on saving unsaved changes in another 

policy.

The Policy Information page appears.

Click 

 in the navigation panel on the left.

The Advanced Settings page appears.

You have two choices:

If the configuration is enabled, click 

.

If the configuration is disabled, click 

, then click 

.

The Detection Settings page appears. A message at the bottom of the page identifies the intrusion 
policy layer that contains the configuration. See 

 for 

more information.

You have the following choices:

For deployed devices that might detect different VLAN tags for the same connection in traffic 
traveling in different directions, select the 

 check box to ignore VLAN headers 

when identifying traffic.

For deployed devices that will not detect different VLAN tags for the same connection traffic 
traveling in different directions, clear the 

 check box to include VLAN headers 

when identifying traffic.

Save your policy, continue editing, discard your changes, revert to the default configuration settings in 
the base policy, or exit while leaving your changes in the system cache. See the 

 table for more information.