A Security policy rule is configured with a Vulnerability Protection Profile and an action of “Deny”.
Which action will this configuration cause on the matched traffic?
A Security policy rule is configured with a Vulnerability Protection Profile and an action of “Deny”.
Which action will this configuration cause on the matched traffic?
When a Security policy rule is configured with an action of 'Deny', the firewall will deny the matched sessions immediately. Any configured Security Profiles, including Vulnerability Protection Profiles, have no effect if the Security policy rule action is set to 'Deny'.
A: If you want to block traffic from zone A to zone B and you have configured the security rule to block this traffic, lets say the first packet comes from zone A, we do a route lookup and find the destination zone to be zone B. You will then do a policy lookup and see that there is a policy match. But since the action is set to "deny", the packet is dropped immediately. Firewall will only inspect the traffic if the policy it matched has action set to "allow".
I second the explanation of Djedeen.
A is correct
answer is A