What is an advantage of adding multiple inline interface pairs to the same inline interface set when deploying an asynchronous routing configuration?

Question

Options

• AAllows the IPS to identify inbound and outbound traffic as part of the same traffic flow.
• BThe interfaces disable autonegotiation and interface speed is hard coded set to 1000 Mbps.
• CAllows traffic inspection to continue without interruption during the Snort process restart.
• DThe interfaces are automatically configured as a media-independent interface crossover.

• A
  87% (48)
• B
  4% (2)
• C
  7% (4)
• D
  2% (1)

Explanation

Asymmetric (asynchronous) routing occurs when the inbound and outbound packets of the same TCP/UDP flow traverse different physical paths-and therefore different firewall or IPS interfaces. A stateful IPS needs to see both directions of a flow to properly inspect it; if it only sees traffic in one direction, it cannot maintain accurate session state and may drop or misidentify traffic. By placing multiple inline interface pairs into the same inline interface set, the Cisco IPS logically groups those pairs together so that regardless of which physical interface pair the inbound vs. outbound packets arrive on, the IPS engine treats them as belonging to the same traffic flow. This enables correct stateful inspection under asymmetric routing conditions. Options B and D describe physical interface behaviors unrelated to asymmetric routing. Option C describes the benefit of inline bypass/fail-open for Snort restarts, which is a different feature.

No community discussion yet for this question.