An engineer is reviewing an existing custom server fingerprint on a Cisco Secure Firewall because the current information is inaccurate. Which action must the engineer take to improve the accuracy…

The correct answer is B. Exclude the ports that must be skipped. To improve the accuracy of a custom server fingerprint in Cisco Secure Firewall, the engineer should exclude ports that may lead to false positives or are not representative of the actual services on the host. This helps the system focus only on relevant traffic, ensuring more…

Management and Troubleshooting

Question

An engineer is reviewing an existing custom server fingerprint on a Cisco Secure Firewall because the current information is inaccurate. Which action must the engineer take to improve the accuracy of the network discovery rules?

Options

AAdd NetFlow monitoring for the network segment
BExclude the ports that must be skipped.
CSet one common rule to override the reports in the multidomain environment.
DExclude the IP address that is used to communicate with the monitored host.

How the community answered

(36 responses)

A
3% (1)
B
81% (29)
C
11% (4)
D
6% (2)

Explanation

To improve the accuracy of a custom server fingerprint in Cisco Secure Firewall, the engineer should exclude ports that may lead to false positives or are not representative of the actual services on the host. This helps the system focus only on relevant traffic, ensuring more precise network discovery and fingerprinting.

Topics

#Cisco Secure Firewall#Network Discovery#Server Fingerprinting#Firepower Management Center

Community Discussion

No community discussion yet for this question.

Full 300-710 Practice