What is the advantage of having Cisco Firepower devices send events to Cisco Threat response via the security services exchange portal directly as opposed to using syslog?

Question

Options

• AFirepower devices do not need to be connected to the internet.
• BAll types of Firepower devices are supported.
• CSupports all devices that are running supported versions of Firepower
• DAn on-premises proxy server does not need to set up and maintained

• B
  6% (1)
• D
  94% (15)

Explanation

When Cisco Firepower devices send events directly to Cisco Threat Response via the Security Services Exchange (SSE) portal, they communicate over the internet using a cloud-based integration. The key advantage over syslog is that syslog-based integration typically requires an on-premises syslog server or proxy (such as a syslog forwarder or aggregator) that must be deployed, configured, and maintained. With direct SSE integration, Firepower devices communicate directly with the Cisco cloud, eliminating the need for any on-premises proxy infrastructure. Option A is incorrect because SSE requires internet connectivity. Option B is incorrect because not all Firepower device types support SSE. Option C is a vague restatement and not a true advantage.

No community discussion yet for this question.