Chapter 2 of 4 · Cisco CCNP 300-710 SNCF
Configuration
Overview of the SNCF Configuration chapter covering FMC system settings, security policies, discovery, objects, device settings, VPN and the Snort engine.
- 9topics
- 37 minfast track
- 5diagrams and exhibits
- 30%of the exam
Topics in this chapter
Take them in order, or jump to the one you need.
- 1FMC System SettingsLearn the main FMC system settings, including access list, time, HTTPS certificate, users, licences, updates, backup and the REST…4 min
- 2Access Control PolicyLearn how the FMC access control policy orders rules, which actions and conditions exist, how inspection attaches, and how…Diagram4 min
- 3DNS, Identity and Network Analysis PoliciesLearn how DNS policy rules and actions, identity policy and realms, and network analysis policies work with the access control…4 min
- 4Discovery, Detectors, Correlation and EVELearn how network discovery, application detectors, correlation and the Encrypted Visibility Engine give the FMC better host and…4 min
- 5Objects and Intrusion RulesLearn how the FMC Object Management page stores reusable objects, and how intrusion policies, variable sets and custom intrusion…4 min
- 6Device Management, Certificates and HealthLearn how to add and manage devices in the FMC, enrol certificates, build platform settings policies and use health policies and…4 min
- 7NAT, QoS and Routing on FTDLearn how NAT policy sections, auto and manual NAT, QoS rate limiting and static and dynamic routing are configured on Secure…Diagram4 min
- 8Zero Trust Access and VPNLearn how Secure Firewall gives secure access with site to site VPN, remote access VPN with Secure Client, and zero trust network…Diagram5 min
- 9Snort in Threat DefenseLearn how Snort inspects traffic inside Secure Firewall Threat Defense, how packets pass between Lina and Snort, and how Snort 2…Diagram4 min
About this chapter
What this chapter covers
Configuration is the largest chapter, and it is about building policy in the Secure Firewall Management Center (FMC).
It covers the settings of the FMC itself, the security policies that decide what happens to traffic, the features that learn about the network, the reusable objects, and the settings of each managed device. It ends with a look at the Snort engine that does the inspection.
The chapter follows the Configuration objectives for the CCNP 300-710 SNCF exam, which are 2.1 to 2.6 in the question bank.
How the topics fit together
The FMC is configured first, then the policies are built from objects and assigned to devices.
System settings come first because they decide who can log in and how the FMC is licensed and updated. Objects come next, because most policies refer to them.
The access control policy is the centre of the chapter. DNS, identity and network analysis policies attach to it. Discovery, detectors and correlation add awareness of hosts and a way to react to events.
Device settings come last. They cover the device page, certificates, platform settings and health, then NAT, QoS and routing, then VPN and zero trust access. The final page explains the Snort engine, so you know where inspection happens.
Menu names change between FMC releases. The pages describe the feature first and name menus only where they are stable.
How to use these pages
Each topic page has the same shape, so you can skim for what you need.
- What it is: the idea in plain words.
- How it works: the mechanism, with diagrams and example commands.
- What to remember for the exam: the facts to memorise.
- Common mistakes: the usual traps.
- Check yourself: three questions to test your understanding.
If you have a lab or a trial FMC, click through each page as you read. Seeing the same settings on screen makes the names much easier to remember.
Ready for more practice?
The full Cisco CCNP 300-710 SNCF question bank has 865 questions, with timed practice exams and an explanation for every answer.
This study guide is independent and is not affiliated with, endorsed by, or sponsored by Cisco. Vendor names, certification names and exam codes are trademarks of their respective owners and are used for identification only.