Your company enforces a strict change control policy. Which of the following would be MOST effective for quickly dropping an attacker's specific active connection?

Changing the Rule Base and installing the policy to all Security Gateways requires a full policy installation cycle, which is time-consuming and introduces a formal change control event rather than an emergency in-session block.

The Block Intruder feature in SmartView Tracker allows an administrator to immediately terminate a specific active connection visible in the live log without installing a new policy or modifying the Rule Base. This bypasses the formal change control process since it is an on-demand, session-level action rather than a policy change. It targets the exact connection rather than applying broad rules across all gateways.

An IDS Policy install deploys intrusion detection signatures to sensors and does not provide a mechanism to immediately terminate a specific active attacker session.

SAM rules in SmartView Monitor create criteria-based blocks for future matching connections but do not instantly drop a currently active, specific session the way Block Intruder does.