156-215.77 · Question #130
An internal router is sending UDP keep-alive packets that are being encapsulated with GRE and sent through your R77 Security Gateway to a partner site. A rule for GRE traffic is configured for…
The correct answer is A. The Log Server log unification process unifies all log entries from the Security Gateway on a. See the full explanation below for the reasoning.
Question
An internal router is sending UDP keep-alive packets that are being encapsulated with GRE and sent through your R77 Security Gateway to a partner site. A rule for GRE traffic is configured for ACCEPT/LOG. Although the keep-alive packets are being sent every minute, a search through the SmartView Tracker logs for GRE traffic only shows one entry for the whole day (early in the morning after a Policy install). Your partner site indicates they are successfully receiving the GRE encapsulated keep- alive packets on the 1-minute interval. If GRE encapsulation is turned off on the router, SmartView Tracker shows a log entry for the UDP keep-alive packet every minute. Which of the following is the BEST explanation for this behavior?
Options
- AThe Log Server log unification process unifies all log entries from the Security Gateway on a
- BThe log unification process is using a LUUID (Log Unification Unique Identification) that has
- CThe setting Log does not capture this level of detail for GRE.
- DThe Log Server is failing to log GRE traffic properly because it is VPN traffic.
How the community answered
(52 responses)- A79% (41)
- B12% (6)
- C4% (2)
- D6% (3)
Community Discussion
No community discussion yet for this question.