An elections-night Distributed Firewall allow for precinct printers looks correct, but the IP set used in the rule is a single mistyped /32 instead of the printer range. What should the administrator do?
Select an answer to reveal the explanation.
Short Explanation
The rule can be perfect and still miss if the address book has a typo. Fix the IP set—the /32 versus the real printer range—and leave DFW on. Do not shut the whole elections firewall down.
Full Explanation
Inventory objects such as IP sets can be wrong even when the Distributed Firewall rule looks right. A mistyped /32 versus the intended printer range means the allow never matches the precinct printers. Correcting the IP set restores the night-of-election path; disabling DFW or substituting Carbon Black Cloud or Workspace ONE Tunnel is not the inventory fix.