300-710 SNCF: Securing Networks with Cisco Firewalls

By Cisco · Question Mode

QuestionQ2

Integration

An organization has deployed Cisco Firepower without IPS capabilities and now wants to enable traffic inspection. It must detect protocol anomalies and use Snort rule sets to identify malicious behavior. How can this be achieved?

Explanation

A network analysis policy governs packet decoding and preprocessing for inspection, including traffic normalization and identification of protocol anomalies. That preprocessing prepares traffic for evaluation by Snort intrusion rules, which detect malicious patterns.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!