What is correct about the Resource Advisor (RAD) service on the Security Gateways?
Answer(s): D
The Resource Advisor (RAD) service on the Security Gateways is responsible for online categorization of URLs and resources for Application Control and Threat Prevention blades. RAD has two components: a kernel module and a user space module. The kernel module looks up the kernel cache for URLs and resources, notifies the client about hits and misses, and forwards asynchronous requests to the user space module. The user space module handles the communication with the Check Point online web service and updates the kernel cache with the results. RAD can operate in three modes: hold, background, and custom, depending on the configuration of the blades and the policy.
Check Point Processes and Daemons - Section: Security Gateway Software Blades and Features - Subsection: URL Filtering BladeSolved: Re: RAD's high utilization - Post by @PhoneBoyCheck Point Certified Troubleshooting Expert (CCTE) - Exam Topics - Module 5: Advanced Access Control
What file contains the RAD proxy settings?
Which Daemon should be debugged for HTTPS inspection related issues?
Answer(s): B
The WSTLSD daemon is responsible for handling HTTPS Inspection related issues on the Security Gateway. It performs SSL/TLS termination and re-encryption, certificate validation and generation,and URL categorization for HTTPS traffic1. The WSTLSD daemon can be debugged using the command wstlsd debug on TDERROR_ALL_ALL=52. The debug file is located in $FWDIR/log/wstlsd.elg2. The other daemons, such as FWD, HTTPD, and VPND, are not directly related to HTTPS Inspection, but rather to policy installation, web server, and VPN, respectively.
1: sk65144: HTTPS Inspection Architecture 2: sk83520: How to debug the WSTLSD daemon
When URL category is not found in the kernel cache, what action will GW do?
Answer(s): A
The Unified Access Control policy eliminates the need to maintain policies for different access control features However, you need to start a general debug of the Unified Policy with all flags turned on Which of the following is the correct syntax?
Post your Comments and Discuss Checkpoint 156-587 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the 156-587 content, but please register or login to continue.