On the following graphic, you will find layers of policies. What is a precedence of traffic inspection for the defined polices?

Question

Exhibit

Options

• AA packet arrives at the gateway, it is checked against the rules in the networks policy layer and
• BA packet arrives at the gateway, it is checked against the rules in the networks policy layer and
• CA packet arrives at the gateway, it is checked against the rules in the networks policy layer and
• DA packet arrives at the gateway, it is checked against the rules in IPS policy layer and then it

• A
  19% (6)
• B
  72% (23)
• C
  3% (1)
• D
  6% (2)

Explanation

To simplify Policy management, R80 organizes the policy into Policy Layers. A layer is a set of rules, or a Rule Base. For example, when you upgrade to R80 from earlier versions: Gateways that have the Firewall and the Application Control Software Blades enabled will have their Access Control Policy split into two ordered layers: Network and Applications. When the gateway matches a rule in a layer, it starts to evaluate the rules in the next layer. Gateways that have the IPS and Threat Emulation Software Blades enabled will have their Threat Prevention policies split into two parallel layers: IPS and Threat Prevention. All layers are evaluated in parallel https://sc1.checkpoint.com/documents/R80/CP_R80_SecMGMT/html_frameset.htm?topic=docu ments/R80/CP_R80_SecMGMT/126197

No community discussion yet for this question.