topic Re: Bypass Card question in Firewall and Security Management

Bypass Card question

Herschel_Liang — Mon, 15 Oct 2018 15:42:17 GMT

Hi all,

I found that I had enabled bypass feature in appliance. Bypass status appear bypass on. However, I can see it hit some implied rules in smartview tracker. Why? Is it normal? Who can give me correct answer?

B.R.

herschel

Re: Bypass Card question

PhoneBoy — Mon, 15 Oct 2018 17:14:54 GMT

Considering it's supposed to be a hardware bypass, I'm guessing the "bypass status" is erroneous in this case.

According to the Bypass Card FAQ: Bypass (Fail-Open) network interface card FAQ

If bypass is initiated, the flipping is immediate as this is hardware bypass. Yet, the thresholds for each of the following states should be considered:
There is a power loss - Immediate
The appliance is rebooting - Immediate
Unable to allocate memory in kernel - Immediate
High CPU and packet drops - Threshold is set to 5,000 drops and 85% CPU usage within 20 seconds.
DLP process is crash - 20 crashes within 300 seconds
FWD process is not responding - Threshold is set to 75 seconds

And further, the unit will not stay in bypass mode unless one of the above conditions is satisfied.

Re: Bypass Card question

Herschel_Liang — Tue, 16 Oct 2018 00:44:12 GMT

Hi Dameon,

I can see the bypass light turn green and appear bypass status is on in cli. So, it seem bypass card work normally.

B.R.

herschel