300-710 SNCF: Securing Networks with Cisco FirewallsDemo

Question

An engineer needs to export a packet capture from Cisco Secure Firewall Management Center to help troubleshoot an issue on a Secure Firewall Threat Defense device. When the engineer browses to the Secure Firewall Management Center URL below:

https:///capture/CAPI/pcap/sample.pcap

The engineer receives a 403: Forbidden error rather than the PCAP file. Which action fixes the issue?

A Disable the proxy setting on the client browser.
B Disable the HTTPS server and use HTTP.
C Enable HTTPS in the device platform policy.
D Enable the proxy setting in the device platform policy.

Explanation

Downloading a Threat Defense capture through the /capture/<capture-name>/pcap/<file-name> HTTPS endpoint requires the HTTPS server to be enabled on the relevant device data interface through its platform policy. Enabling HTTPS makes that capture-download service available; an outbound proxy setting or browser proxy setting does not provide this service.

Learn more

Cisco: Working with Firepower Threat Defense Packet Captures and Packet Tracer

300-710 SNCF: Securing Networks with Cisco FirewallsDemo

AstroTutor

Notes

Readiness

QuestionQ3

Community Discussion