Which Cisco FirePOWER setting is used to reduce thenumber of events received in a period of time and avoid being overwhelmed?
A. thresholding
B. rate-limiting
C. limiting
D. correlation
Which Cisco FirePOWER setting is used to reduce thenumber of events received in a period of time and avoid being overwhelmed?
A. Thresholding is correct answer
A. Thresholding
You can set a global rule threshold across all traffic to limit how often the policy logs events from a specific source or destination and displays those events per specified time period.
i think is d
Global thresholds cause the system to generate events based on how many times traffic matching an intrusion rule originates from or is targeted to a specific address or address range within a specified time period. This helps prevent the system from being overwhelmed with a large number of events.