- External connection terminating on Spoke (L7 DCF for Active/Passive; L4 DCF for Active/Active)
- External connection terminating on Transit (L4 only for Active/Passive and Active/Active)
If you roll back your 7.2.4820 gateways to 7.1, any DCF rules that include External Connections will no longer be evaluated or enforced. This is expected behavior, because the DCF with External Connections feature was introduced in 7.2.4820.
External Connections with DCF Prerequisites
If the following conditions are met you can enforce Distributed Cloud Firewall (DCF) rules on External Connection (Site2Cloud) interfaces:- DCF feature is enabled; this makes the DCF on External Connections feature available.
- Enforcement on External Connections setting is enabled