In which way are packets handled when the IPS internal zone is set to “disabled”?
A.
All packets are dropped to the external zone.
B.
All packets are dropped to the internal zone.
C.
All packets are ignored in the internal zone.
D.
All packets are sent to the default external zone.
Why? This seems to be wrong according to Cisco:
http://www.cisco.com/c/en/us/td/docs/security/ips/6-1/configuration/guide/cli/cliguide/cli_anomaly_detection.html#wp1042784
The internal zone should represent your internal network. It should receive all the traffic that comes to your IP address range. If the zone is disabled, packets to this zone are ignored. By default the zone is enabled.
You then add the IP addresses that belong to this zone. If you do not configure IP addresses for all zones, all packets are sent to the default zone, the external zone.
Note that the interface is “disabled” and “ip address is not configured yet” is not the case mentioned in the question.
0
0