Cisco Firepower Threat Defense: SNORT3 - Firepower Recommendations

You can use Firepower intrusion rule recommendations to associate the operating systems, servers, and client application protocols detected on your network leveraging FIrepower Network Discovery. This allows you to tailor your intrusion policy to the specific needs of your monitored network and stay current with changes within the environment providing higher levels of efficacy.

[@michaellohman2820]

Does the task actually apply the recommendations or just runs a task to scan what's been discovered and make recommendations? I guess I'm a little confused.

[@jasonmaynard8773]

It can do both and you can schedule this as well. Some will just run the recommendations and review then do a manual apply while others will update and apply the recommendations.