Symptom

This is a documentation request to add additional information to current documentation about Firepower 3100 support for flow-offload. Currently the only documentation available is in the following location(s) and could use to be updated for clarity: https://www.cisco.com/c/en/us/td/docs/security/secure-firewall/management-center/device-config/720/management-center-device-config-72/access-prefilter.html?bookSearch=true#id_14502 Large Flow Offloads On Firepower 4100/9300 chassis), certain traffic that you configure to be fastpathed by a prefilter policy is handled by the hardware (specifically, in the NIC), not by your threat defense software. Offloading these connection flows results in higher throughput and lower latency, especially for data-intensive applications such as large file transfers. This feature is especially useful for data centers. This is called static flow offload. In addition, by default, threat defense devices offload flows based on other criteria, including trust. This is called dynamic flow offload. https://www.cisco.com/c/en/us/td/docs/security/secure-firewall/management-center/device-config/730/management-center-device-config-73/access-prefilter.html?bookSearch=true#id_14502 Large Flow Offloads On Secure Firewall 3100, Firepower 4100/9300 chassis), certain traffic that you configure to be fastpathed by a prefilter policy is handled by the hardware (specifically, in the NIC), not by your threat defense software. Offloading these connection flows results in higher throughput and lower latency, especially for data-intensive applications such as large file transfers. This feature is especially useful for data centers. This is called static flow offload. In addition, by default, threat defense devices offload flows based on other criteria, including trust. This is called dynamic flow offload. Dynamic flow offload is not supported on the Secure Firewall 3100. 7.2.x documentation should indicate (similar to 7.3 indicating Dynamic offload not supported) that static offload is not supported.

Conditions

Firepower 3100 static (prefilter fastpath) flow-offload

Workaround

N/A

Further Problem Description