The Versa Stateful Firewall feature offers which two security capabilities? (Choose two.)

The Versa Stateful Firewall is a foundational security component that operates on a zone-based architecture. This architecture provides macro-segmentation by controlling traffic flow between different security zones (e.g., trust, untrust, DMZ). A key capability of this firewall is Zone Protection, which uses profiles to protect the zones themselves from reconnaissance scans and various types of flooding attacks. These protections are a primary mechanism for mitigating Denial of Service (DoS) and Distributed Denial of Service (DDoS) attacks, which are explicitly listed as a capability of the Versa security stack, starting with the stateful firewall.

A. Unified Threat Management (UTM) is a broader security suite that includes the stateful firewall along with other services like IPS and AV, not a capability of the firewall itself.

D. Dynamic User Protection (DUP) is not a standard term for a Versa Stateful Firewall feature. User-based policies are an NGFW function, which is an extension beyond the base stateful firewall.

1. Versa Networks

"Next-Generation Firewall" Solution Brief

Page 2

"Key Capabilities" section. The document states

"The Versa Networks solution starts with a zone-based stateful firewall providing context-aware security policy enforcement..." This confirms the zone-based nature.

2. Versa Networks

"Secure SD-WAN At-a-Glance" Document

Page 1

"Full Stack of Security" section. This document explicitly lists the components of the security stack: "Versa Secure SD-WAN includes a full-stack of security with a next-generation firewall

including stateful firewall

DoS and DDoS protection..." This directly links the stateful firewall with DDoS protection.

3. Versa Networks

"VOS™ 21.2.3 Security Configuration Guide"

Chapter: "Configuring Zone Protection and DoS Protection"

Section: "Zone Protection Profile". This official configuration guide details the use of Zone Protection Profiles to configure thresholds for various flood attacks (SYN

UDP

ICMP) and reconnaissance protection

which are the core mechanisms for DoS and DDoS defense at the zone level.