Check_Point
156-915.80 · Question #478
Fred is troubleshooting a NAT issue and wants to check to see if the inbound connection from his internal network is being translated across the interface in the firewall correctly. He decides to…
The correct answer is D. Expert@Green# fw monitor -e "accept src=192.168.4.5 or dst=10.1.1.25;" -o monitor.out. See the full explanation below for the reasoning.
Question
Fred is troubleshooting a NAT issue and wants to check to see if the inbound connection from his internal network is being translated across the interface in the firewall correctly. He decides to use the fw monitor to capture the traffic from the source 192.168.3.5 or the destination of 10.1.1.25 on his Security Gateway, Green that has an IP of 192.168.4.5. What command captures this traffic in a file that he can download and review with WireShark?
Options
- AExpert@Green# fwmonitor -e "accept src=192.168.3.5 and dst=10.1.1.25;" -o monitor.out
- BExpert@Green# fw monitor -e "accept src=192.168.3.5 or dst=10.1.1.25;" -o monitor.out
- CExpert@Green# fwmonitor -e "accept src=192.168.3.5 or dst=10.1.1.25;" -o monitor.out
- DExpert@Green# fw monitor -e "accept src=192.168.4.5 or dst=10.1.1.25;" -o monitor.out
How the community answered
(27 responses)- A4% (1)
- B7% (2)
- C15% (4)
- D74% (20)
Community Discussion
No community discussion yet for this question.