156-215.71 · Question #79
An internal router is sending UDP keep-alive packets that are being encapsulated with GRE and sent through your R70 Security Gateway to a partner site. A rule for GRE traffic is configured for…
The correct answer is A. The Log Server log unification process unifies all log entries from the Security Gateway on a specific. See the full explanation below for the reasoning.
Question
An internal router is sending UDP keep-alive packets that are being encapsulated with GRE and sent through your R70 Security Gateway to a partner site. A rule for GRE traffic is configured for ACCEPT/LOG. Although the keep-alive packets are being sent every 1 minute, a search through the SmartView Tracker logs for GRE traffic only shows one entry for the whole day (early in the morning after a Policy install). Your partner site indicates they are successfully receiving the GRE encapsulated keep-alive packets on the 1-minute interval. If GRE encapsulation is turned off on the router, SmartView Tracker shows a log entry for the UDP keep-alive packet every minute. Which of the following is the BEST explanation for this behavior?
Options
- AThe Log Server log unification process unifies all log entries from the Security Gateway on a specific
- BThe Log Server is failing to log GRE traffic property because it is VPN traffic. Disable all VPN
- CThe log unification process is using a LUUID (Log Unification Unique Identification) that has become
- DThe setting Log does not capture this level of details for GRE Set the rule tracking a action to audit
How the community answered
(27 responses)- A85% (23)
- B4% (1)
- C4% (1)
- D7% (2)
Community Discussion
No community discussion yet for this question.