Advanced settings

Application Bypass

The state of Automatic Application Bypass on the device.

Bypass Threshold

The Automatic Application Bypass threshold, in milliseconds.

Object Group Search

The state of object group search on the device. While operating, the Firewall Threat Defense device expands access control rules into multiple access control list entries based on the contents of any network or interface objects used in the access rule. You can reduce the memory required to search access control rules by enabling object group search. With object group search enabled, the system does not expand network or interface objects, but instead searches access rules for matches based on those group definitions. Object group search does not impact how your access rules are defined or how they appear in Cloud-Delivered Firewall Management Center. It impacts only how the device interprets and processes them while matching connections to access control rules.

Interface Object Optimization

The state of interface object optimization on the device. During deployment, interface groups and security zones used in the access control and prefilter policies generate separate rules for each source or destination interface pair. If you enable interface object optimization, the system deploys a single rule per access control or prefilter rule. This can simplify device configuration and improve deployment performance. To reduce memory usage on the device, select both this option and the Object Group Search option.