エンジニアは、Cisco Secure Firewall Management Center で管理されている Cisco Secure Firewall Threat Defence デバイスを設定しようとしています。リモート管理のため、デバイスは SSH が有効になっており、内部インターフェースからアクセスできる必要があります。これを実現するには、エンジニアはどのような種類のポリシーを設定する必要がありますか?
正解:D
To enable SSH access to a Cisco Secure Firewall Threat Defense (FTD) device from the inside interface for remote administration, the engineer needs to configure a Platform Settings policy in Cisco Secure Firewall Management Center (FMC). The Platform Settings policy allows the configuration of various system-related settings, including enabling SSH, specifying the allowed interfaces, and defining the SSH access parameters.
Steps:
* In FMC, navigate toPolicies > Access Control > Platform Settings.
* Create a new Platform Settings policy or edit an existing one.
* In the policy settings, go to theSSHsection.
* Enable SSH and specify theinsideinterface as the allowed interface for SSH access.
* Define the SSH parameters such as allowed IP addresses, user credentials, and other security settings.
* Save and deploy the policy to the FTD device.
This configuration ensures that SSH access is enabled on the specified interface, allowing secure remote administration.
References:Cisco Secure Firewall Management Center Administrator Guide, Chapter on Platform Settings.