Bypassing IDPS Inspection for Large Dataflows

Large dataflows sometimes cause latency or black hole in the traffic. HPE Aruba Networking Central allows you to bypass IDPS Intrusion Detection and Prevention System (IDPS) monitors, detects, and prevents threats in the inbound and outbound traffic. Aruba IDPS provides an extra layer of protection that actively analyzes the network and takes actions on the traffic flows based on the defined rules. It inspects data packets, and if any threat is identified, acts real-time to prevent it. inspection for large SMB Server Message Block or Small and Medium Business. Server Message Block operates as an application-layer network protocol mainly used for providing shared access to files, printers, serial ports, and for miscellaneous communications between the nodes on a network. data transfers to avoid any drops, when large dataflows impact the traffic flow. Enable the Bypass inspection for large dataflows toggle switch. By default, the bypass inspection for large dataflow is disabled.

This option must be enabled only for gateways with huge SMB data transfers. When bypass is enabled, the inspection is not done for SMB traffic for the new and existing sessions. When bypass is disabled, the inspection is done for SMB traffic, but only for the new sessions.

To bypass inspection for large dataflows, complete the following steps:

In the WebUI, configure a Branch Gateway or Branch Gateway group.
The HPE Aruba Networking gateway (independent or part of a group) that you want to configure must support Gateway IDS/IPS.
Under Manage, click Security > Gateway IDS/IPS.
Click the Config icon to open the Gateway IDS/IPS configuration page.
Click the Policies tab.
A consolidated list of policies is displayed.
Under Advanced, click the Bypass Inspection for Large Dataflows toggle switch.
The bypass is enabled.
Click Confirm in the confirmation dialog box.
The inspection will be bypassed for SMB transfers for the new and existing sessions.