Views:
View a list of the filters that were most recently affected by adaptive filtering. IPS devices display the ten most recent filters. TPS devices display the twenty-five most recent filters.
The Adaptive Filter List provides the following information:
Option Description
Device Name Device name.
Filter Type Security or Application filter.
Filter Name The name of the filter being managed by the adaptive filter function. Learn more: Adaptive filtering.
Filter State
  • Enabled — When selected, this indicates that the filter was once disabled by AFC, cleared by a user, and is now enabled in the engine and will execute the associated action set. Learn more: Action sets.
  • Disabled — If the checkbox is not selected, then this filter has been uninstalled from the engine by the adaptive filter function.
The device automatically takes a traffic capture when a filter enters AFC. After you clear the filter state, it might still appear on the Adaptive Filter List so that you can download the associated packet capture (PCAP) file. Learn more: Traffic capture.

Procedure

  1. Select Devices → All Devices → Member Summary → Events, and then select the Adaptive Filter tab.
  2. To clear the AFC state on a filter, select the filter(s) and then click Clear Selected Filters. This re-enables the selected filter states. This option is available on TPS devices running TOS version 5.1 and later.
  3. To clear the AFC state on all the device filters, click Clear All. This re-enables every filter state on the device. This option is available only on TPS devices running TOS version 5.1 and later.
  4. To change the AFC setting on a filter, edit the filter.