Antivirus protection on a VPN-1 Gateway is available for all of the following protocols, EXCEPT

Yusuf A.Jun 27, 2026

TELNET is the correct answer because it is a plain terminal protocol that just carries text commands and has no file or content transfer mechanism that an antivirus engine can inspect, so Check Point VPN-1 AV has never supported it. The protocols that do get AV scanning are the ones that move files or content, like HTTP, FTP, SMTP, and POP3.

Dervla O.Jun 27, 2026

The stem is asking you to think about what an antivirus engine actually needs to do its job, which is inspect content moving through a protocol, so the first elimination move is to ask yourself which option does not carry file or data content in a scannable way. POP3, HTTP, and FTP all transfer files or web objects that an AV engine can intercept and inspect at the application layer. TELNET is a character-by-character terminal session protocol, there is no payload in the file-transfer sense, so an AV engine has nothing meaningful to hook into. Here is my question for the group: do you understand WHY that protocol cannot carry inspectable content, or are you just memorizing that it is the exception, because if it is the latter you will miss a reworded version of this same concept on a different question?

Bahar F.Jun 7, 2026

TELNET is the odd one out and it comes down to what the AV engine is actually doing at the application layer. Check Point's content inspection on VPN-1 works by reassembling and scanning payloads in protocols that carry files or transferable content, so HTTP, FTP, POP3, and SMTP all fit that model because the engine has something to inspect. TELNET is just a character-stream terminal protocol, no file payload to reassemble, nothing for the AV engine to hand off to a scanner, so it was never in scope for that feature. When I sat this exam I almost second-guessed myself on FTP because active vs. passive FTP handling was fresh in my mind from a troubleshooting case the week before, but I reminded myself the question was about AV coverage, not NAT traversal, and TELNET has no inspectable content by design. Marked B, moved on, and it came back correct.

Eitan E.Jun 16, 2026

POP3 has no scannable payload at the gateway level, pick A.