You are working with multiple Security Gateways enforcing an extensive number of rules. To simplify security administration, which action would you choose?
- Eliminate all possible contradictory rules such as the Stealth or Cleanup rules.
- Create a separate Security Policy package for each remote Security Gateway.
- Create network objects that restricts all applicable rules to only certain networks.
- Run separate SmartConsole instances to login and configure each Security Gateway directly.
Answer(s): B
Explanation:
To simplify security administration when working with multiple Security Gateways enforcing an extensive number of rules, you would choose to create a separate Security Policy package for each remote Security Gateway. A Security Policy package is a set of rules and objects that can be assigned to one or more Security Gateways. This allows you to manage different policies for different gateways from the same Management Server1. The other options are either not effective or not feasible for simplifying security administration.
Reference:
Check Point R81 Security Management Administration Guide