Which of the following is NOT a feature of a next generation firewall?
- application visibility and control
- stateless firewall
- URL filtering
- advanced malware protection
Next generation firewalls (NGFW) are stateful firewalls, not stateless firewalls.
Some of the features of the Cisco NGFW are:
– Stateful firewall
– Application visibility and control
– Advanced malware protection
– URL filtering
With a stateful firewall, a packet is allowed if it is a response to a previous connection. If the table holds no information about the packet, the packet is compared ti the access control list (ACL). Depending on the ACL, the packet will be forwarded to the appropriate host or dropped completely.
Objective: Security Monitoring
Sub-Objective: Describe these types of data used in security monitoring: Full packet capture, Session data, Transaction data, Statistical data, Extracted content, Alert data