SEC0168 - ASA FirePower Application Filtering (Part 1)

How does we can creeate layer7 rate limit policies? Like Cisco CX...

thanks for this interesting video ;

For most of our customers, ASA FP is added to an existing ASA environment, so with an existing set of ASA rules ; and in most cases too, this ASA to ASA+FP migration is performed first, to add the IPS FP function ;

As it is not always easy nor wished to migrate all existing ASA rules towards FP rules (in the FP Access Control Policy), we face situations where we can have 2 set of rules : 1 in ASA and 1 in FP because, apart from the FP IPS fuction, the included FP AVC function can be really useful to remove the limitations of basic L3/L4 ASA functions

Questions :
1) if we have an ASA rule that denies a flow and an FP rule which allows this same flow,
a) will ASA redirect this flow request to FP for Analysis ? I guess the answer is no ;
b) if yes, will the flow be finally allowed by the ASA end whether FP trust it ?

2) if we have an ASA rule that allows all flows from Inside to Outside and an FP rule which explicitely and only allows Office365 Applications flows without any explicit FP deny rule for the rest of detected applications :
a) will the Office365 flow be allowed by the ASA whether FP trust it ?
b) will the other non Office365 applications detected by FP be implicitely denied by the FP and so by the ASA ?
the question here is to know if FP has an implicit deny rule at the end of its Access Control Policy as it is the case in the ASA rule

thanks again for your videos