Configure policies using User-ID and App-ID, enable decryption, apply appropriate security profiles to rules, and update regularly with dynamic updates.
C.
Configure all default policies provided by the firewall, use Policy Optimizer, and adjust security rules after an incident occurs.
D.
Configure a block policy for all malicious inbound traffic, configure an allow policy for all outbound traffic, and update regularly with dynamic updates.
Dynamic updates to ensure up-to-date threat coverage
“For comprehensive security, combine User-ID, App-ID, decryption, and security profiles. Keep the firewall updated with dynamic content updates to maintain the strongest security posture.”
(Source: Best Practices for Security Policy)
This ensures real-time, identity-aware, and application-centric security enforcement.
