問題文
What does sending firewall logs to the Strata Logging Service provide that keeping them only on the firewall does not?
選択肢
- Real-time enforcement of policy decisions on behalf of the firewall, so the dataplane can hand the decision to the service and keep forwarding.
- A second copy of the security policy so that the rules can be restored if the firewall's configuration is lost, which is why the logging destination is also used as part of the backup strategy for the device.
- Storage that is not limited by the firewall's own disk, so logs are retained longer and remain available even after the firewall rotates its local records.
- The ability to generate logs for traffic that no security policy rule matched, so sessions the firewall dropped silently become visible.