Which product provides zone-based and policy-driven security via a virtual firewall?

Question

Options

• ACisco Virtual Security Gateway
• BCisco ASA 5505v
• CCisco Nexus 1000V
• DIPS sensor

• A
  96% (24)
• C
  4% (1)

Explanation

Cisco Virtual Security Gateway (VSG) is purpose-built as a virtual firewall that enforces zone-based security policies in virtualized data center environments, operating in conjunction with the Cisco Nexus 1000V virtual switch to control traffic between virtual machine security zones.

Why the distractors are wrong:

• B (ASA 5505v): The Cisco ASA 5505 is a physical, hardware-based firewall appliance - not a virtual, zone-policy-driven solution designed for hypervisor environments.
• C (Nexus 1000V): This is a virtual switch, not a firewall. It provides Layer 2 switching for VM traffic and serves as the platform the VSG plugs into, but it does not enforce security policies itself.
• D (IPS sensor): An IPS detects and blocks intrusion attempts based on threat signatures - it is not a zone-based firewall and does not control traffic between policy zones.

Memory tip: Break down the name - Virtual Security Gateway. "Virtual" = runs in a hypervisor, "Security" = firewall/policy enforcement, "Gateway" = traffic control between zones. If the question mentions virtual + zones + policy, think VSG.

No community discussion yet for this question.