Question 81 · 338 in bank
An administrator receives reports that users cannot access a cloud-hosted web server. The access control policy was recently updated with several new policy additions and URL filtering. What must be done to troubleshoot the issue and restore access without sacrificing the organization's security posture?
Show answer
Answer: B
Explanation
B. Identify the blocked traffic in the Cisco FMC connection events to validate the block, and modify the policy to allow the traffic to the web server. To troubleshoot this issue and restore access without sacrificing the organization's security posture, the administrator should use the Cisco FMC connection events to identify the traffic that is being blocked and validate the block. Once the traffic has been identified, the access control policy can be modified to allow the traffic to the cloud-hosted web server. Creating a new access control policy rule or allowing all traffic to the web server could potentially introduce security risks, so it is important to only allow the necessary traffic and ensure that the policy aligns with the organization's security requirements. Using the packet capture tool or flexconfig objects could be used to troubleshoot the issue but would likely be more time-consuming and complex than using the connection events dashboard.
Source: Adapted from community discussion — Joe_Blue