In this section we are going to focus on learning more about data and event analysis to effectively
analyze data.
It needs to be normalized normalization is the process of reorganizing data so that it can be viewed
in one form.
This eliminates redundant data and minimizes the chance that an attacker can evade detection.
Data normalization can be categorized into three types.
One and Two and three are enough Cisco's firepower security devices use normalisation preprocessors
to normalize traffic after packet decoding from the firepower management center.
If you go to policies access control and intrusion you can add your IP policy which includes preprocessors
for normalization.
So here I have my IP policy I click the pencil icon to edit it you can get to the IPX preprocessor rules
by going under policy information and Salatin rules
and preprocessors.
So as you can see in the preprocessors section there is the list of configuration options for popular
protocols such as DNS a.p and HTP.