Login
- Table of Contents
- Related Documents
-
| Title | Size | Download |
|---|---|---|
| 13-Advanced settings | 19.74 KB |
Introduction
The following functions are supported in the advanced settings:
· Bypass. The bypass feature disables the DPI engine so packets will not be processed by DPI. You can enable bypass when the CPU usage is high to guarantee device performance. By default, the DPI engine is enabled.
· Activate. After you edit the policy and rule settings for DPI service modules, you must click Activate to validate the settings. The validation operation can cause temporary service disruptions. As a best practice, perform the operation after all DPI service policy and rule settings are complete.
· DPI support for high availability. Enable this feature on a hot backup system in dual-active mode for asymmetric-path traffic of DPI services to be processed correctly. This feature consumes system resources. As a best practice, enable this feature only when asymmetric-path traffic of DPI services exists.
Restrictions and guidelines
· When bypass is enabled, the system does not process received packets by DPI. DPI-based services might also be interrupted. For example, security policies cannot control application access.
· Activating configuration causes transient DPI service interruption. DPI-based services might also be interrupted. For example, security policies cannot control application access.
