What is a purpose of the network analysis policy on a Cisco Firepower NGIPS?

Rules for encrypting traffic are typically handled by VPN policies or other cryptographic configurations, not the network analysis policy.

The network analysis policy in Cisco Firepower Next-Generation IPS (NGIPS) determines how network traffic is normalized and preprocessed. This includes tasks like TCP stream reassembly, fragmentation reassembly, and other preparations before the traffic is subjected to detailed intrusion rule inspection.

Examining packets for attacks using intrusion rules is the function of the intrusion policy, which operates after traffic has been preprocessed by the network analysis policy.

Specifying outer-header criteria without advanced inspection typically relates to access control lists (ACLs) or initial policy matching, not the network analysis policy's preprocessing role.