A network engineer is tasked with minimising traffic interruption during peak traffic limes. When the SNORT inspection engine is overwhelmed, what must be configured to alleviate this issue?

The correct answer is D. Enable Automatic Application Bypass. Automatic Application Bypass (AAB) allows packets to bypass detection if Snort is down or if a packet takes too long to process. AAB causes Snort to restart within ten minutes of the failure, and generates troubleshooting data that can be analyzed to investigate the cause of…

Configuration

Question

Options

AEnable IPS inline link state propagation
BEnable Pre-filter policies before the SNORT engine failure.
CSet a Trust ALL access control policy.
DEnable Automatic Application Bypass.

How the community answered

(28 responses)

A
11% (3)
B
4% (1)
C
4% (1)
D
82% (23)

Explanation

Automatic Application Bypass (AAB) allows packets to bypass detection if Snort is down or if a packet takes too long to process. AAB causes Snort to restart within ten minutes of the failure, and generates troubleshooting data that can be analyzed to investigate the cause of the Snort guide-v623/device_management_basics.html

Topics

#SNORT Engine#Automatic Application Bypass (AAB)#Traffic Management#Firepower Performance

Community Discussion

No community discussion yet for this question.

Full 300-710 Practice