An engineer is deploying a Cisco Secure Firewall Management Center appliance. The company must send data to Cisco Secure Network Analytics appliances. Which two actions must the engineer take?…

Question

Options

• ACreate a service identifier to enable the NetFlow service.
• BAdd the Netflow_Send_Destination object to the configuration.
• CAdd the Netflow_Set_Parameters object to the configuration.
• DAdd the Netflow_Add_Destination object to the configuration.
• ESecurity Intelligence object to send data to Cisco Secure Network Analytics

• A
  3% (1)
• B
  6% (2)
• C
  79% (27)
• E
  12% (4)

Explanation

Cisco Secure Network Analytics (formerly Stealthwatch) receives NetFlow data from FTD devices managed by FMC. Because FTD does not natively expose a NetFlow configuration GUI in FMC, FlexConfig policy objects are used. Two specific FlexConfig objects are required: (C) Netflow_Set_Parameters - configures the NetFlow parameters such as the template timeout and flow record settings on the FTD device, and (D) Netflow_Add_Destination - specifies the IP address and UDP port of the Secure Network Analytics collector (Flow Collector) to which the FTD will export flow records. Both objects must be added to a FlexConfig policy and deployed to the managed device. Without both, either the NetFlow process is not properly configured or the destination is unknown.

No community discussion yet for this question.