Firepower NAP (Network Analysis policy) Question?

PacketSpartan — Tue, 19 Mar 2024 09:53:37 GMT

I am trying to get my head around this to make sure i've understood this correctly. Hopefully someone will be able to clarify it for me.

1. As per the below image, I can see that Balanced and security is enabled as a default for NAP in the default network Analysis policy.

2. if we already have a Default option on that image then what is the first option for? (Intrusion Policy used before acess control rule is determined) , I can see the NAPs i've created on the bottom option, but not on the first drop down menu.

3. Am i correct in assuming: once i've created a Rate based attack prevention NAP, (which is built on top of Balanced and security as a base) then i call that NAP in the Default Network Analysis policy section?

4. Or will is it better to use the custom rules to call the NAP i've created for the rate based attack prevention?

5. is there any advantage to Having a NAP that's Balanced and security but an IPS policy within one ACP rule is set to security over connectivity? (will this even work?)

topic Firepower NAP (Network Analysis policy) Question? in Network Security

Firepower NAP (Network Analysis policy) Question?