You want to bypass IDP for traffic destined to social media sites using APBR, but it is not working and IDP is dropping the session. What are two reasons for this problem? (Choose two.)

Question

Options

• AThe session did not properly reclassify midstream to the correct APBR rule.
• BIDP disable is not configured on the APBR rule.
• CThe application services bypass is not configured on the APBR rule.
• DThe APBR rule does a match on the first packet.

• A
  58% (14)
• B
  13% (3)
• D
  29% (7)

Explanation

APBR (Advanced Policy-Based Routing) requires the session to be classified based on the specified rule, which can change midstream as additional packets are processed. If the session was already established before the APBR rule took effect, the traffic may not be correctly reclassified to match the new APBR rule, leading to IDP (Intrusion Detection and Prevention) processing instead of being bypassed. This can occur especially when the session was already established before the rule change. For APBR to work and bypass the IDP service, the application services bypass must be explicitly configured. Without this configuration, the APBR rule may redirect the traffic, but the IDP service will still inspect and potentially drop the traffic. This is especially important for traffic destined for specific sites like social media platforms where bypassing IDP is desired.

No community discussion yet for this question.