MENU
A network administrator is deploying a new Cisco Secure Firewall Threat Defense (FTD) firewall After Cisco Secure FTD is deployed, inside clients nave intermittent connectivity to each other. When ... the packet capture on the Secure FTD firewall, the administrator sees that Secure FID is responding to all the AW requests on the inside network. Which action must the network administrator e to resolve the issue''
Suggested Answer: A
Get Premium 300-710 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
If inside clients have intermittent connectivity issues and the Cisco Secure FTD is responding to all ARP requests on the inside network, it indicates that there may be an incorrect proxy ARP configuration in the NAT policy. Proxy ARP can cause the FTD to respond to ARP requests on behalf of other devices, leading to connectivity issues.
Steps to resolve:
Review the NAT policy on the FTD to identify any incorrect proxy ARP configurations.
Disable the proxy ARP setting for the relevant NAT rules that are causing the issue.
This ensures that the FTD only responds to ARP requests as needed, preventing it from interfering with normal ARP traffic on the inside network.
33 comments · newest first
JA
Jaleesa
11 months ago
I’d try option D, transparent mode could solve the problem.
ST
Stephaine
11 months ago
Surprised this is happening, thought FTD handled ARP better.
VI
Vincent
11 months ago
Hardcoding MAC addresses? That seems like a hassle, option B is a no-go.
LU
Lucia
11 months ago
I think option C is the way to go, ARP needs to be allowed!
JA
Jaime
12 months ago
Sounds like a NAT issue, option A makes sense.
KI
Kimbery
12 months ago
I feel like reviewing the NAT policy could be important too, but I can't recall if that directly relates to ARP requests.
AN
Annamae
1 year ago
I practiced a similar question where changing the mode of the firewall helped with ARP. Option D might be worth considering.
KR
Kristofer
1 year ago
I'm not entirely sure, but I think disabling proxy ARP could help. It seems like a common fix for these kinds of issues.
LE
Lenita
1 year ago
I remember something about ARP issues causing connectivity problems, so maybe option C is the right choice?
DA
Daron
1 year ago
Ah, I see the key is to identify why the FTD is responding to all the ARP requests on the inside network. Reviewing the NAT policy and disabling any incorrect proxy ARP configuration seems like the way to go.
ST
Stephanie
1 year ago
Converting the FTD to transparent mode could work, but I'm not sure if that's the best solution. I'll double-check the other options first before considering that.
RO
Rosann
1 year ago
Hmm, hardcoding MAC addresses on client machines doesn't sound like the right approach here. I think I'll focus on reviewing the access policy and making sure ARP is allowed between the inside clients.
VI
Vilma
1 year ago
This seems like a tricky one. I'll need to carefully review the NAT policy and check for any proxy ARP configuration that might be causing the issue.
HE
Heike
1 year ago
Hmm, I'm a bit unsure about this one. The options seem to cover a range of different medical conditions, and I'm not totally confident in my knowledge of respiratory diseases. I'll have to think this through carefully.
VI
Vincent
2 years ago
Converting the FTD to transparent mode? Sounds like a recipe for disaster. I'm sticking with option C, my friend.
JU
Justine
2 years ago
Let's go with option C and see if that resolves the issue.
DI
Diego
2 years ago
I agree, reviewing the access policy seems like the safest bet.
CA
Carmelina
2 years ago
Option C sounds like the best solution to me.
SA
Sarina
2 years ago
Hardcoding MAC addresses? That's so 90s. I'd go with option A - review the NAT policy and disable that pesky proxy ARP.
LA
Lashanda
2 years ago
I think option A is the way to go. Let's make sure to review the NAT policy and fix that proxy ARP issue.
LE
Leonora
2 years ago
Yeah, hardcoding MAC addresses seems like a hassle. I agree, let's go with option A.
DA
Dalene
2 years ago
Option A sounds like the best solution. Let's review the NAT policy and disable the incorrect proxy ARP.
AS
Asha
2 years ago
I'm not sure, but I think option C) Review the access policy and verify that ARP is allowed from inside to inside could also be a valid solution.
AL
Alpha
2 years ago
Option C seems like the logical choice here. Gotta make sure that ARP is allowed from inside to inside on the access policy.
AL
Alexis
2 years ago
I agree with Herminia, because incorrect proxy ARP configuration can cause connectivity issues.
HE
Herminia
2 years ago
I think the answer is A) Review NAT policy and disable incorrect proxy ARP configuration.
SH
Shizue
2 years ago
Ah, the joys of firewall configuration! I bet the admin is having a blast trying to figure out this ARP issue.
AV
Avery
2 years ago
D: D) Convert the FTD to transparent mode to allow ARP requests.
CA
Carin
2 years ago
C: A) Review NAT policy and disable incorrect proxy ARP configuration.
BA
Barney
2 years ago
B: Hardcode the MAC address of the FTD to IP mapping on client machines.
WH
Whitley
2 years ago
B: C) Review the access policy and verify that ARP is allowed from inside to inside.
CA
Carin
2 years ago
A: A) Review NAT policy and disable incorrect proxy ARP configuration.
BR
Brinda
2 years ago
A: Review NAT policy and disable incorrect proxy ARP configuration.