JN0-635 · Question #51
Your network includes SRX Series devices at the headquarters location. The SRX Series devices at this location are part of a high availability chassis cluster and are configured for IPS. There has…
The correct answer is B. Existing sessions are no longer processed by IPS and become firewall sessions. IPS with Chassis Clustering Limitations: IPS is supported in both active/passive and active/active chassis cluster modes on SRX Series devices with the following limitations: No inspection is performed on sessions that fail over or fail back. Only new sessions after a failover…
Question
Your network includes SRX Series devices at the headquarters location. The SRX Series devices at this location are part of a high availability chassis cluster and are configured for IPS. There has been a node failover. In this scenario, which statement is true?
Options
- AExisting sessions continue to be processed by IPS because of table synchronization.
- BExisting sessions are no longer processed by IPS and become firewall sessions.
- CExisting session continue to be processed by IPS as long as GRES is configured.
- DExisting sessions are dropped and must be reestablished so IPS processing can occur.
How the community answered
(36 responses)- A3% (1)
- B83% (30)
- C6% (2)
- D8% (3)
Explanation
IPS with Chassis Clustering Limitations: IPS is supported in both active/passive and active/active chassis cluster modes on SRX Series devices with the following limitations: No inspection is performed on sessions that fail over or fail back. Only new sessions after a failover are inspected by IPS, and older sessions become firewall session
Topics
Community Discussion
No community discussion yet for this question.