Advanced

A CCSE engineer at a retailer is working during a Sunday change window. A policy has a stealth rule below broad inbound accepts; the security architect wants management interfaces protected. What is the best correction?