Which three FirePOWER services features require a subscription license? (Choose three.)

The correct answer is A. IPS C. URL filtering E. AMP. IPS (A), URL Filtering (C), and AMP (E) each map to a distinct Cisco Firepower subscription license - the Protect license for IPS, the URL Filtering license for URL-based reputation/category filtering, and the Malware license for AMP file inspection and sandboxing. These…

Understanding Next-Generation Firewall Technology and Concepts

Question

Options

AIPS
BAVC
CURL filtering
Dhigh availability
EAMP
Fidentity visibility

How the community answered

(19 responses)

A
84% (16)
D
11% (2)
F
5% (1)

Explanation

IPS (A), URL Filtering (C), and AMP (E) each map to a distinct Cisco Firepower subscription license - the Protect license for IPS, the URL Filtering license for URL-based reputation/category filtering, and the Malware license for AMP file inspection and sandboxing. These features pull from continuously updated Talos intelligence feeds, which is why Cisco gates them behind ongoing subscriptions rather than a one-time purchase.

The distractors are wrong for these reasons: AVC (B) is included in the base Firepower license at no extra cost; high availability (D) is a platform/hardware capability, not a licensed feature; and identity visibility (F) (user-to-IP mapping via ISE or AD agents) is available without an additional subscription.

Memory tip: Think of the three subscriptions as the "TAM" trio - Threat (IPS), AMP (malware), Match-URL (URL filtering) - the features that require live cloud-feed updates are the ones you pay for on an ongoing basis.

Topics

#FirePOWER licensing#IPS#URL filtering#AMP

Community Discussion

No community discussion yet for this question.

Full 700-270 Practice