examen capitulo 8 cisco ccna 2

examen capitulo 8 cisco ccna 2.k Ss§Threat Prevention [FTD]) and next-generation IPS appliances (e.g., Cisco Firepower Generation T IPS appliances) provide more robust solutions to defend against the threats faced today. In terms of analysis of security logs and events, thisFigure 11-11 Cisco FMC's Content Explorer window11.2 Network Insight Technologies 411devices open up a new chapter.The above integrated set of network security and traffic management products, also known as the Cisco Firepower system, is a set of products that can be deployed either on an appliance or as a software solution running on a virtual machine (VM). In a typical deployment, multiple managed devices installed in a network segment monitor and analyze traffic and also report to the Firepower Management Center (FMC). The FMC is the heart of all reporting and event analysis.It is necessary to monitor events for traffic that does not comply with the access control policy. Network administrators can configure access control policies to indicate, detect, and log traffic traversing the network. The system will handle the traffic within the network based on the configured access control policy. A simpler access control policy allows the target device to handle all traffic based on the default action specified by the policy. The default action can be set to either block or trust all traffic without further detection, or to detect traffic for intrusion and data exploration. More sophisticated access control policies can blacklist traffic based on IP.URL and DNS security clearing data, plus use access control rules for fine-grained control over logging and processing of network traffic. Access control rules can be simple or complex, and traffic can be matched and detected based on multiple criteria. Traffic can be controlled based on security zone, network or geographic location, VLAN, port number, application, URL as access request, and user name. Advanced access control options include decryption, preprocessing, and performance.Each access control rule specifies an action by which the system decides whether to monitor, trust, block, or release the matched traffic. When releasing traffic, you can have the system first inspect the traffic by intrusion or file policy, with the goal of blocking any exploits, malware, or prohibited files before they enter or exit the network.Figure 11.11 shows the Cisco FMC's Content Explorer window, which displays traffic and intrusion events generated by managed devices (multiple next-generation firewalls and next-generation IPS devices).. * I