An engineer is setting up a new Firepower deployment and is looking at the default FMC policies to start the implementation.
During the initial trial phase, the organization wants to test some common Snort rules while still allowing the majority of network traffic to pass.
Which default policy should be used?
Click on the arrows to vote for the correct answer
A. B. C. D.D.
The default policies in the Firepower Management Center (FMC) are designed to provide a starting point for the configuration of network security policies. These policies can be modified and customized according to the specific needs and requirements of the organization.
In this scenario, the organization wants to test some common Snort rules while still allowing the majority of network traffic to pass. Therefore, the ideal default policy to use would be "Balanced Security and Connectivity".
The "Balanced Security and Connectivity" policy is a good starting point for most organizations, as it provides a balance between security and connectivity. This policy allows most network traffic to pass while providing a moderate level of security. This policy is useful when an organization wants to test new rules or configurations while minimizing the impact on network operations.
On the other hand, "Security Over Connectivity" is a policy that provides a higher level of security, but it can potentially block legitimate network traffic. This policy is suitable for organizations that require a high level of security and are willing to tolerate some impact on network operations.
"Maximum Detection" is a policy that provides the highest level of security, but it can also result in a significant impact on network operations. This policy is suitable for organizations that require the highest level of security and are willing to tolerate significant network disruption.
Lastly, "Connectivity Over Security" is a policy that prioritizes network connectivity over security, allowing most network traffic to pass while providing minimal security. This policy is suitable for organizations that prioritize network connectivity over security and are willing to accept some security risk.
In summary, "Balanced Security and Connectivity" is the best default policy to use when an organization wants to test new rules or configurations while minimizing the impact on network operations.