topic Re: ECMS Practice Question - Jul 30rd in Cloud Networking Platform

ECMS Practice Question - Jul 30rd

SandroNa — Fri, 30 Jul 2021 16:05:01 GMT

This week question is not a usual pick 1 or pick 2 but rather a 'select all that apply', I can't hide my expectations for spoiler free comments 😎 but as always you can just post what you think is the correct answer.

See you in a week with the correct answer(s)!

ECMS practice question

Where on Dashboard would you go to configure layer 7 firewall rules to deny traffic for specific applications? (Select all that apply)

Security & SD-WAN > Configure > Firewall
Security & SD-WAN > Configure > Site-to-site VPN
Systems Manager > Configure > Policies
Wireless > Configure > Firewall & traffic shaping
Network-wide > Configure > Group policy

Here you can find previous questions

Re: ECMS Practice Question - Jul 30rd

RomanMD — Fri, 30 Jul 2021 20:17:20 GMT

There are so many options, that sometimes it just makes things more difficult than simpler 😄

Spoiler

whAt if i've pickeD three of thEm?

Re: ECMS Practice Question - Jul 30rd

BRUCE NEWTON — Fri, 30 Jul 2021 21:38:51 GMT

I wouldn’t say it was dead easy, but a nice challenge.

Re: ECMS Practice Question - Jul 30rd

Philip D'Ath — Sun, 01 Aug 2021 21:19:04 GMT

My thoughts.

Spoiler

Security & SD-WAN > Configure > Firewall. Yes.
Security & SD-WAN > Configure > Site-to-site VPN. My first response is no. I've never tried the SD-WAN Plus licence and I know it has additional application recognition options.
Systems Manager > Configure > Policies. My first response is no. I can think of application control but that is not firewalling.
Wireless > Configure > Firewall & traffic shaping. Yes.
Network-wide > Configure > Group policy. Tricky one! If you have an MX or MR in the network then the answer is yes, otherwise the answer is no. For example, if you only have MS in your network then you won't see layer 7 options in group policy.

Security & SD-WAN > Configure > Firewall. Yes.Security & SD-WAN > Configure > Site-to-site VPN. My first response is no. I've never tried the SD-WAN Plus licence and I know it has additional application recognition options.Systems Manager > Configure > Policies. My first response is no. I can think of application control but that is not firewalling.Wireless > Configure > Firewall & traffic shaping. Yes.Network-wide > Configure > Group policy. Tricky one! If you have an MX or MR in the network then the answer is yes, otherwise the answer is no. For example, if you only have MS in your network then you won't see layer 7 options in group policy.

Re: ECMS Practice Question - Jul 30rd

ArashEmami — Wed, 11 Aug 2021 08:04:37 GMT

I would say A & D are correct answers.

Re: ECMS Practice Question - Jul 30rd

SandroNa — Wed, 25 Aug 2021 16:28:58 GMT

Better late than ever
A -D-E
were the correct answers!

Thanks everyone for participating!

Honorable mention to who spotted the limit case on E, available only if the network included devices capable of enforcing those L7 deny rules.

Re: ECMS Practice Question - Jul 30rd

monicajiao — Thu, 02 Sep 2021 13:40:56 GMT

may I know why this practice did not update anymore?