You are configuring gateway IDS/IPS settings in Aruba Central. For which reason would you set the Fail Strategy to Bypass?

Question

Options

• ATo permit traffic if the IPS engine falls to inspect It
• BTo enable the gateway to honor the allowlist settings configured in IDS/IPS policies
• CTo tell gateways to stop enforcing IDS/IPS policies if they lose connectivity to the Internet
• DTo avoid wasting IPS engine resources on filtering traffic for unauthenticated clients

• A
  93% (28)
• B
  3% (1)
• C
  3% (1)

Explanation

The Fail Strategy is a configuration option for the IPS mode of inspection on Aruba gateways. It defines the action to be taken when the IPS engine crashes and cannot inspect the traffic. There are two possible options for the Fail Strategy: Bypass and Block. If you set the Fail Strategy to Bypass, you are telling the gateway to allow the traffic to flow without inspection when the IPS engine fails. This option ensures that there is no disruption in the network connectivity, but it also exposes the network to potential threats that are not detected or prevented by the IPS engine. If you set the Fail Strategy to Block, you are telling the gateway to stop the traffic flow until the IPS engine resumes inspection. This option ensures that there is no compromise in the network security, but it also causes a loss of network connectivity for the duration of the IPS engine

No community discussion yet for this question.