How do you configure the Security Policy to provide uses access to the Captive Portal through an external (Internet) interface?

By default, Check Point's Captive Portal only listens on internal interfaces. To permit access from an external (Internet) interface, an administrator must open the gateway object settings and explicitly enable Captive Portal access for that external interface. Without this change, external users cannot reach the portal regardless of policy rules.

External interface access to Captive Portal is not available by default - it is disabled for security reasons and must be explicitly enabled in the gateway configuration.

Global Properties Identity Awareness settings control global Identity Awareness behavior, not per-gateway external interface permissions for Captive Portal access.

This choice is identical to C and is similarly incorrect - the per-gateway external interface setting, not Global Properties, controls whether Captive Portal is reachable from outside.