After enabling multiple security profiles such as IPS, antivirus, and URL filtering on an NGFW, users report degraded network performance. Which factor is MOST likely causing the issue?

Question

Options

• AIncorrect DNS configuration
• BExcessive CPU utilization due to deep inspection
• CAsymmetric routing
• DVLAN misconfiguration

• A
  4% (1)
• B
  85% (23)
• C
  7% (2)
• D
  4% (1)

Explanation

Each security profile added to an NGFW policy requires the firewall to perform additional computational work on every packet or session. IPS requires pattern matching against thousands of signatures, antivirus scans file payloads, and URL filtering checks URLs against databases. Running all three simultaneously on high-volume traffic significantly increases CPU and memory consumption. If the firewall hardware is undersized for the traffic load or if too many profiles are applied broadly, CPU utilization spikes, causing packet processing delays and perceived network slowness. DNS misconfiguration (A) causes name resolution failures, not throughput degradation. Asymmetric routing (C) can cause stateful inspection failures but is a connectivity issue. VLAN misconfiguration (D) causes Layer 2 forwarding problems, not performance degradation from inspection.

No community discussion yet for this question.