300-415 · Question #71
A network administrator is configuring an application-aware firewall between inside zones to an outside zone on a WAN edge router using vManage GUI. What kind of Inspection is performed when the…
The correct answer is A. stateful inspection for TCP and UDP. When the "inspect" action is used in a Cisco SD-WAN application-aware firewall, it performs stateful inspection for both TCP and UDP traffic.
Question
Options
- Astateful inspection for TCP and UDP
- Bstateful inspection for TCP and stateless inspection of UDP
- CIPS inspection for TCP and-Layer 4 inspection for UDP
- DLayer 7 inspection for TCP and Layer 4 inspection for UDP
How the community answered
(24 responses)- A88% (21)
- B4% (1)
- D8% (2)
Why each option
When the "inspect" action is used in a Cisco SD-WAN application-aware firewall, it performs stateful inspection for both TCP and UDP traffic.
The "inspect" action in a Cisco SD-WAN application-aware firewall configures stateful inspection. This means the firewall actively tracks the state of TCP connections and UDP flows, allowing return traffic that is part of an established session to pass through automatically, thus providing robust security for both protocols.
The "inspect" action provides stateful inspection for both TCP and UDP traffic, not stateless inspection for UDP.
IPS inspection is a distinct security function, and while Layer 4 inspection for UDP is involved, the term "inspect" refers to comprehensive stateful tracking.
While application-aware firewalls can perform Layer 7 inspection for application identification, the "inspect" action itself primarily signifies stateful connection tracking at Layer 4 for both TCP and UDP.
Concept tested: Application-aware firewall inspect action
Source: https://www.cisco.com/c/en/us/td/docs/routers/sdwan/configuration/security/ios-xe-17/security-book-xe/application-aware-firewall.html#C_Actions_in_an_Application_Aware_Firewall_Policy_13876.html
Topics
Community Discussion
No community discussion yet for this question.