ECMS Practice Question - Jul 30rd

[SandroZ]

This week question is not a usual pick 1 or pick 2 but rather a 'select all that apply', I can't hide my expectations for spoiler free comments 😎 but as always you can just post what you think is the correct answer.

See you in a week with the correct answer(s)!

ECMS practice question

Where on Dashboard would you go to configure layer 7 firewall rules to deny traffic for specific applications? (Select all that apply)

1. Security & SD-WAN > Configure > Firewall
2. Security & SD-WAN > Configure > Site-to-site VPN
3. Systems Manager > Configure > Policies
4. Wireless > Configure > Firewall & traffic shaping
5. Network-wide > Configure > Group policy

Here you can find previous questions

[RomanMD]

There are so many options, that sometimes it just makes things more difficult than simpler 😄

Spoiler

whAt if i've pickeD three of thEm?

[Bruce]

I wouldn’t say it was dead easy, but a nice challenge.

[PhilipDAth]

My thoughts.

Spoiler

1. Security & SD-WAN > Configure > Firewall.  Yes.
2. Security & SD-WAN > Configure > Site-to-site VPN.  My first response is no.  I've never tried the SD-WAN Plus licence and I know it has additional application recognition options.
3. Systems Manager > Configure > Policies.  My first response is no.  I can think of application control but that is not firewalling.
4. Wireless > Configure > Firewall & traffic shaping.  Yes.
5. Network-wide > Configure > Group policy.  Tricky one!  If you have an MX or MR in the network then the answer is yes, otherwise the answer is no.  For example, if you only have MS in your network then you won't see layer 7 options in group policy.

[MEmami]

I would say A & D are correct answers.

[SandroZ · Accepted solution]

Better late than ever
A -D-E
were the correct answers!

Thanks everyone for participating!

Honorable mention to who spotted the limit case on E, available only if the network included devices capable of enforcing those L7 deny rules.

[monicajiao]

may I know why this practice did not update anymore?