An engineer is configuring a Cisco Secure Firewall Threat Defense device managed by Cisco Secure Firewall Management Center. The device must have SSH enabled and be accessible from the inside…

The correct answer is A. platform settings. SSH management access is a device management (platform-level) setting, not a traffic-forwarding policy. Platform Settings policies (A) in FMC control how the FTD device itself is managed, including enabling SSH, specifying which interfaces and IP ranges are allowed to SSH into…

Configuration

Question

An engineer is configuring a Cisco Secure Firewall Threat Defense device managed by Cisco Secure Firewall Management Center. The device must have SSH enabled and be accessible from the inside interface for remote administration. Which type of policy must the engineer configure to accomplish this?

Options

Aplatform settings
Baccess control
Cprefilter
Didentity

How the community answered

(18 responses)

A
89% (16)
B
6% (1)
D
6% (1)

Explanation

SSH management access is a device management (platform-level) setting, not a traffic-forwarding policy. Platform Settings policies (A) in FMC control how the FTD device itself is managed, including enabling SSH, specifying which interfaces and IP ranges are allowed to SSH into the device, configuring HTTPS management access, NTP, banners, and SNMP. Access Control policies (B) govern traffic flowing through the device between network zones. Prefilter policies (C) handle early fast-path decisions for tunneled traffic. Identity policies (D) are used for user authentication and identity mapping. Therefore, to allow SSH access from the inside interface, the engineer must configure a Platform Settings policy.

Topics

#FTD SSH configuration#FMC Platform Settings#Remote administration#Firewall management

Community Discussion

No community discussion yet for this question.

Full 300-710 Practice