Which Cisco Firepower rule action displays an HTTP warning page?

The correct answer is C. Interactive Block. The 'Interactive Block' action in Cisco Firepower blocks the initial HTTP/HTTPS request but presents the user with a warning or notification page explaining that the site has been blocked. Unlike a hard 'Block', Interactive Block can optionally allow the user to click through…

Configuration

Question

Options

AMonitor
BBlock
CInteractive Block
DAllow with Warning

How the community answered

(52 responses)

A
2% (1)
B
2% (1)
C
90% (47)
D
6% (3)

Explanation

The 'Interactive Block' action in Cisco Firepower blocks the initial HTTP/HTTPS request but presents the user with a warning or notification page explaining that the site has been blocked. Unlike a hard 'Block', Interactive Block can optionally allow the user to click through and proceed to the site (a 'soft block' or 'warn' behavior). 'Monitor' (A) only logs traffic without blocking. 'Block' (B) silently drops the connection or returns a reset without an HTML warning page. 'Allow with Warning' (D) is not a valid Firepower access control action-that phrasing does not correspond to a real rule action in FMC/FTD.

Topics

#Cisco Firepower#Access Control Policy#Rule Actions#Interactive Block

Community Discussion

No community discussion yet for this question.

Full 300-710 Practice