156-215.80 · Question #350
Under which file is the proxy arp configuration stored?
The correct answer is D. $FWDIR/conf/local.arp on the gateway. Check Point stores the proxy ARP configuration in $FWDIR/conf/local.arp on the security gateway, not on the management server.
Question
Under which file is the proxy arp configuration stored?
Options
- A$FWDIR/state/proxy_arp.conf on the management server
- B$FWDIR/conf/local.arp on the management server
- C$FWDIR/state/_tmp/proxy.arp on the security gateway
- D$FWDIR/conf/local.arp on the gateway
How the community answered
(40 responses)- A3% (1)
- B5% (2)
- D93% (37)
Why each option
Check Point stores the proxy ARP configuration in $FWDIR/conf/local.arp on the security gateway, not on the management server.
The proxy ARP configuration is not stored on the management server; the management server handles policy compilation but the gateway enforces ARP responses.
While local.arp is the correct filename, placing it on the management server is incorrect - the file must reside on the gateway that performs ARP.
The path $FWDIR/state/_tmp/proxy.arp is not the correct path; the correct path is $FWDIR/conf/local.arp on the gateway.
The proxy ARP configuration file local.arp resides at $FWDIR/conf/local.arp on the security gateway itself, because the gateway is the device that responds to ARP requests on behalf of NATted addresses. The gateway enforces the NAT policy and must have local access to this file at enforcement time.
Concept tested: Check Point proxy ARP configuration file location
Source: https://support.checkpoint.com/results/sk/sk30197
Topics
Community Discussion
No community discussion yet for this question.