An organization has implemented Cisco Firepower without IPS capabilities and now wants to enable inspection for their traffic. They need to be able to detect protocol anomalies and utilize the Snort rule sets to detect malicious behavior. How is this accomplished?
A) Modify the network discovery policy to detect new hosts to inspect.
B) Modify the access control policy to redirect interesting traffic to the engine.
C) Modify the intrusion policy to determine the minimum severity of an event to inspect.
D) Modify the network analysis policy to process the packets for inspection.

Question

Quizplus · Accepted Answer

The network analysis policy in Cisco Firepower is responsible for processing packets for inspection, which includes detecting protocol anomalies and utilizing Snort rule sets for identifying malicious behavior.

An Organization Has Implemented Cisco Firepower Without IPS Capabilities and Now