2019-01-20 11:11 PM
Hi,
i face an issue with High traffic lead to exceed the usage limit, is it possible to use Network filters or BPF filter to drop the capture traffic from many Subnets,
which one of the filters if used lead policy to not count the traffic.
2019-01-21 01:27 AM
You can filter by Network or Application rules then it will not be accounted in licensing.
2019-01-21 08:43 AM
Are you truncating encrypted traffic?
You could add that to your apprules (at the very bottom) so that encrypted traffic doesn't count against your license
name=truncate_esp rule="ip.proto=51" alert=filter truncate=app type=application
name=truncate_gre rule="ip.proto=47" alert=filter truncate=app type=application
name=truncate_encrypted rule="service=22,443 || ip.proto=50" alert=filter truncate=app type=application
