According to Check Point Best Practice, when adding a non-managed Check Point Gateway to a Check Point security solution what object SHOULD be added? A(n):

A 'Gateway' object implies the gateway is directly managed by the current SmartCenter/Management Server, which is incorrect for an externally managed device.

An 'Interoperable Device' is intended for third-party (non-Check Point) VPN endpoints, not for Check Point gateways managed elsewhere.

An 'Externally managed gateway' object is the correct representation for a Check Point Security Gateway that exists in another management domain - it signals that the gateway runs Check Point software but is controlled by a separate management server. This allows the local management server to define VPN communities and rules involving that gateway without attempting to manage its policy. Using this object type preserves correct topology and trust assumptions between Check Point components.

A 'Network Node' is a generic host/network object and does not carry gateway or VPN peer capabilities.