Firpower IPS

[ccna_security]

Dear all. Does IPS works from bottom to top?i have always heard that everything in IT filed make decision my scanning from top to bottom. IPS has several layers. for example 

Drop malware

Disable Portscan

Firepower Recommendation

Balanced Security and Connectivity

How these layers will be sequenced? From bottom to top or vice verse?

[Marvin Rhoads]

Firepower Threat Defense devices use the following order of operations:

FTD OOO

[ccna_security]

Dear Marvin

The question I want to ask is that IPS configured as shown in attachment. How will this layer be proceed? from top-to-bottom, or Bottom-to-top?

[Marvin Rhoads · Accepted solution]

Within the policy layers, processing is from top to bottom. Layers above override settings in the layers below. 

[ccna_security]

That is all. thanks Marvin