Hi All,
I'm in the process of configuring an FMC intrusion policy for all of my remote sites and I have a couple of questions regarding recommendations that I cant find a solid answer to.
I have a single intrusion policy and I have enabled it to use a Base Policy of 'Balanced Security & Connectivity' and to use recommendations. I have also created a schedule to automatically update the recommendations on a weekly basis, however, I'm not sure if I then need to manually commit the changes under the intrusion policy and then apply to the sensors or if all of this is done/can be done automatically as well?
Many thanks