Cisco Firepower Threat Defense Configuration: Activating New Policies

Activating New Policies

Question

After changes are made to the Cisco Firepower Threat Defense configuration using the Cisco Firepower Device Manager API, what must be done to ensure that the new policy is activated?

Answers

Explanations

Click on the arrows to vote for the correct answer

A. B. C. D.

A.

The correct answer is A. Submit a POST to the /api/fdm/latest/operational/deploy URI.

After making changes to the Cisco Firepower Threat Defense configuration using the Cisco Firepower Device Manager API, you must deploy the changes to ensure that the new policy is activated and takes effect.

The correct method to deploy the new policy is to submit a POST request to the /api/fdm/latest/operational/deploy URI. This URI is used to initiate a deployment operation, which applies the changes made to the configuration to the managed devices.

Submitting a GET request to the /api/fdm/latest/operational/deploy URI will not activate the new policy. A GET request is used to retrieve information from the server, not to initiate an operation.

Submitting a PUT request to the /api/fdm/latest/devicesettings/pushpolicy URI is used to push a new policy to the managed device, but it does not deploy the policy.

Therefore, the correct answer is A. Submit a POST to the /api/fdm/latest/operational/deploy URI.