My company has a Cisco FTD as Internet Edge gateway, behind that, we have a Auto-VPN hub on one-arm concentrator mode, remote sites are on MPLS network.                             MX 450(1 arm concentrator)                                | Internet 1Gbps - FTD [DC] ———-2Gbps MPLS —————[remote] MX 250- MS                                       Speedtest from remote office, we got 400mbps down 700mbps up.  Is this normal to see down speed much lower than up speed? ... View more

Hi Everyone,   Do GP L3 rules work with L3 FW rules? I mean, do they work in a hierarchical model or it's always one or another?   For example, user accesses http scenario: 1. HTTP traffic -> GP L3 rules, if not blocked -> MX L3 rule, if not blocked -> Internet   If this is not possible, what would be the best way to permit a special port for a group of people based on AD group, provided a company wide policy already there on MX.   Thanks. ... View more