QUESTION: 153

You enable Hide NAT on the network object, 10.1.1.0 behind the Security Gateway's external interface. You browse to the Google Website from host, 10.1.1.10 successfully. You enable a log on the rule that allows 10.1.1.0 to exit the network. How many log entries do you see for that connection in SmartView Tracker?

Two, one for outbound, one for inbound
Only one, outbound
Two, both outbound, one for the real IP connection and one for the NAT IP connection
Only one, inbound

Answer(s): B

Reveal Solution Next Question

QUESTION: 154

You are a Security Administrator who has installed Security Gateway R80 on your network. You need to allow a specific IP address range for a partner site to access your intranet Web server. To limit the partner's access for HTTP and FTP only, you did the following:
1) Created manual Static NAT rules for the Web server.
2) Cleared the following settings in the Global Properties > Network Address Translation screen:
- Allow bi-directional NAT
- Translate destination on client side
Do the above settings limit the partner's access?

Yes. This will ensure that traffic only matches the specific rule configured for this traffic, and that the Gateway translates the traffic after accepting the packet.
No. The first setting is not applicable. The second setting will reduce performance.
Yes. Both of these settings are only applicable to automatic NAT rules.
No. The first setting is only applicable to automatic NAT rules. The second setting will force translation by the kernel on the interface nearest to the client.

Answer(s): D

Reveal Solution Next Question