A security administrator must implement a network intrusion policy in Cisco Secure Firewall to block...

Balanced Security and Connectivity is Cisco’s recommended starting point for most deployments because its rule states are selected to provide effective threat detection while preserving speed and normal connectivity. Cisco describes the policy as being built for both detection and performance, which matches the requirement to protect broadly without materially reducing throughput. Connectivity Over Security enables far fewer blocking rules and prioritizes availability, so it provides less coverage than requested. Security Over Connectivity enables more anomaly rules and can block legitimate traffic. Maximum Detection activates rules across many additional threat categories and has the greatest potential operational and performance impact. The requirement explicitly calls for a broad, optimized base policy rather than the most aggressive possible inspection, making Balanced Security and Connectivity the correct choice. Cisco system-provided intrusion policy guidance