156-215.80 · Question #473
Which of the following is used to enforce changes made to a Rule Base?
The correct answer is C. Install policy. In Check Point, changes to the Rule Base are only enforced on Security Gateways after the policy is installed; saving or publishing alone does not push rules to enforcement points.
Question
Which of the following is used to enforce changes made to a Rule Base?
Options
- APublish database
- BSave changes
- CInstall policy
- DActivate policy
How the community answered
(26 responses)- A4% (1)
- C92% (24)
- D4% (1)
Why each option
In Check Point, changes to the Rule Base are only enforced on Security Gateways after the policy is installed; saving or publishing alone does not push rules to enforcement points.
Publishing the database commits changes to the shared management database so other logged-in administrators can see them, but it does not push or enforce any rules on the gateways.
Saving changes writes the current session state locally but does not compile or distribute the policy to any Security Gateway for enforcement.
Install Policy compiles the Rule Base and distributes it from the Management Server to all targeted Security Gateways, making the rules active on network traffic. Without this step, changes exist only in the management database and have no effect on traffic. This is a required workflow step after every Rule Base modification in Check Point SmartConsole.
'Activate policy' is not a valid function or menu option in Check Point SmartConsole; no such enforcement mechanism exists in the product.
Concept tested: Check Point policy installation and enforcement workflow
Source: https://sc1.checkpoint.com/documents/R80.40/WebAdminGuides/EN/CP_R80.40_SecurityManagement_AdminGuide/Content/Topics-SGASGW/Installing-the-Security-Policy.htm
Topics
Community Discussion
No community discussion yet for this question.