Joey is using the computer with IP address 192.168.20.13. He wants to access web page many rules on Check Point Firewall are required for this connection?

Separate rules for HTTP and DNS are not required because Stateful Inspection handles return traffic automatically - this answer incorrectly applies a stateless, packet-filtering-style rule logic.

Packet Filtering firewalls are stateless and would require rules for both outbound and inbound directions - Check Point uses the more advanced Stateful Inspection technology, not simple packet filtering.

Stateful Inspection eliminates the need for a separate inbound return-traffic rule by tracking the connection in a state table, so only one outbound rule is needed to permit the complete exchange.

Check Point's Stateful Inspection engine maintains a state table of all active connections. When an outbound HTTP request is permitted by a single rule, the firewall records the session state and automatically allows the corresponding return traffic without requiring a separate rule, making one rule sufficient for the entire exchange.