Threat Prevention requires topology to be defined while it is defined 1800 Appliance

[Emil_T]

I have an 1800 Appliance QUANTUM SPARK.

When installing the Threat Policy I see this warning:

Threat Prevention requires the topology to be defined.
At least one internal, one external, and no undefined interfaces are required.
Incorrectly defined topology impacts performance and security.
Please install both Access Control and Threat Prevention policies after fixing the topology. Prevention policies after fixing the topology.

I checked my topology and I have all interfaces except one configured as Internal and one as External.
There are no undefined interfaces

 

1. Does this warning mean that the Threat blades will not function at all while the warning persists? If not, what exactly does it mean?
2. What is the solution for this?

[PhoneBoy]

I would open a TAC case to understand why you are getting this error, given this configuration.
An undefined (or not properly defined) topology may cause additional traffic to be inspected (for example, when “protected scope” is used in your policy).

[Emil_T]

I don't use external / DMZ restriction in Threat policy and profiles.

Does this warning has any effect in my case?

[PhoneBoy]

As far as I know, it won't.
However, I'd still double check with TAC here.

[the_rock]

I actually checked my notes from few years ago and I remember this EXACT message with one customer and TAC informed us that while it does not cause those blades to malfunction (if you will), it may have impact on the performance. I would definitely contact TAC to correct it.

Andy

[the_rock]

@Emil_T 

I looked at your screenshot again and I find it odd warning would mention undefined interfaces, as I dont see any of those there.

Andy