A company has Aruba gateways and wants to start implementing gateway IDS/IPS. The customer has selected Block for the Fail Strategy. What might you recommend to help minimize unexpected outages…

Question

Options

• AConfiguring a relatively high threshold for the gateway threat count alerts
• BMaking sure that the gateways have formed a cluster and operate in default gateway mode
• CSetting the IDS or IPS policy to the least restrictive option, Lenient
• DEnabling alerts and email notifications for events related to gateway IPS engine utilization and

• A
  10% (5)
• B
  2% (1)
• C
  6% (3)
• D
  82% (42)

Explanation

Gateway IDS/IPS is a feature that allows the Aruba gateways to monitor and block malicious or unwanted traffic based on predefined or custom rules. The Fail Strategy is a setting that determines how the gateways handle traffic when the IPS engine fails or crashes. The Block option means that the gateways will stop forwarding traffic until the IPS engine recovers, while the Bypass option means that the gateways will continue forwarding traffic without inspection. The Block option provides more security, but it also increases the risk of network outages if the IPS engine fails frequently or for a long time. To minimize this risk, it is recommended to enable alerts and email notifications for events related to gateway IPS engine utilization and errors. This way, the network administrators can be informed of any issues with the IPS engine and take appropriate actions to restore or troubleshoot it.

No community discussion yet for this question.