156-215.76 · Question #189
An internal router is sending UDP keep-alive packets that are being encapsulated with GRE and sent through your R76 Security Gateway to a partner site. A rule for GRE traffic is configured for…
The correct answer is A. The Log Server log unification process unifies all log entries from the Security Gateway on a specific. See the full explanation below for the reasoning.
Question
An internal router is sending UDP keep-alive packets that are being encapsulated with GRE and sent through your R76 Security Gateway to a partner site. A rule for GRE traffic is configured for ACCEPT/LOG. Although the keep-alive packets are being sent every minute, a search through the SmartView Tracker logs for GRE traffic only shows one entry for the whole day (early in the morning after a Policy install). Your partner site indicates they are successfully receiving the GRE encapsulated keep-alive packets on the 1-minute interval. If GRE encapsulation is turned off on the router, SmartView Tracker shows a log entry for the UDP keep-alive packet every minute. Which of the following is the BEST explanation for this behavior?
Options
- AThe Log Server log unification process unifies all log entries from the Security Gateway on a specific
- BThe log unification process is using a LUUID (Log Unification Unique Identification) that has become corrupt.
- CThe setting Log does not capture this level of detail for GRE. Set the rule tracking action to Audit since
- DThe Log Server is failing to log GRE traffic properly because itis VPN traffic. Disable all VPNconfiguration
How the community answered
(32 responses)- A75% (24)
- B13% (4)
- C9% (3)
- D3% (1)
Community Discussion
No community discussion yet for this question.