An organization has implemented Cisco Firepower without IPS capabilities and now wants to enable inspection for their traffic. They need to be able to detect protocol anomalies and utilize the Snort rule sets to detect malicious behaviour.
How is this accomplished?

Question

An organization has implemented Cisco Firepower without IPS capabilities and now wants to enable inspection for their traffic. They need to be able to detect protocol anomalies and utilize the Snort rule sets to detect malicious behaviour.

How is this accomplished?

Filippo Panarella · Accepted Answer

Modify the intrusion policy to determine the minimum severity of an event to inspect.

Filippo Panarella · Answer

Modify the access control policy to redirect interesting traffic to the engine

Filippo Panarella · Answer

Modify the network discovery policy to detect new hosts to inspect

Filippo Panarella · Answer

Modify the network analysis policy to process the packets for inspection

Question list

List of questions

Question 1

(0)

Question 2

(0)

Question 3

(0)

Question 4

(0)

Question 5

(0)

Question 6

(0)

Question 7

(0)

Question 8

(0)

Question 9

(0)

Question 10

(0)

Related questions

Question 114 - 300-710 discussion

Suggested answer: D

0 comments