300-710 · Question #141
What is the advantage of having Cisco Firepower devices send events to Cisco Threat Response via the security services exchange portal directly as opposed to using syslog?
The correct answer is B. An on-premises proxy server does not need to be set up and maintained.. A key advantage of configuring Cisco Firepower devices to send events directly to Cisco Threat Response via the Security Services Exchange portal is that it removes the need for an on-premises proxy server.
Question
What is the advantage of having Cisco Firepower devices send events to Cisco Threat Response via the security services exchange portal directly as opposed to using syslog?
Options
- AAll types of Cisco Firepower devices are supported.
- BAn on-premises proxy server does not need to be set up and maintained.
- CCisco Firepower devices do not need to be connected to the Internet.
- DSupports all devices that are running supported versions of Cisco Firepower.
How the community answered
(41 responses)- A2% (1)
- B93% (38)
- C5% (2)
Why each option
A key advantage of configuring Cisco Firepower devices to send events directly to Cisco Threat Response via the Security Services Exchange portal is that it removes the need for an on-premises proxy server.
While many Firepower devices are supported, stating 'all types' might be an overstatement, and the specific advantage is about simplified connectivity, not universal support.
The Cisco Security Services Exchange (SSE) acts as a cloud-based broker, allowing Firepower devices to directly upload events to Cisco Threat Response and other cloud services. This direct cloud connectivity often eliminates the requirement for an organization to deploy and maintain an on-premises proxy server for outbound cloud communications.
To send events to a cloud service like SSE and Cisco Threat Response, the Firepower devices absolutely need internet connectivity (either direct or via an external proxy).
Similar to A, while supported versions are necessary, the unique advantage of direct SSE integration is the architectural simplification, not merely device compatibility.
Concept tested: Cisco Security Services Exchange (SSE) benefits
Source: https://www.cisco.com/c/en/us/products/security/security-services-exchange.html
Topics
Community Discussion
No community discussion yet for this question.