Tom is troubleshooting NAT issues using fw monitor and Wireshark. He tries to initiate a
connection from the external network to a DMZ server using the public IP which the firewall
translates to the actual IP of the server. He analyzes the captured packets using Wireshark
and observes that the destination IP is being changed as required by the firewall but does
not see the packet leave the external interface. What could be the reason?

Tom has a Web server for which he has created a manual NAT rule. The rule is not
working. He tries to initiate a connection from the external network to a DMZ server using
the public IP which the firewall translates to the actual IP of the server. He analyzes the
captured packets using Wireshark and observes that the destination IP is being changed as
required by the firewall but does not see the packet leave the internal interface. Which box
in Global Properties should be checked?

Which FW-1 kernel flags should be used to properly debug and troubleshoot NAT issues?

Which file should be edited to modify ClusterXL VIP Hide NAT rules, and where?

When viewing a NAT Table, What represents the second hexadecimal number of the
6-tuple:

By default, the size of the fwx_alloc table is:

Given the screen configuration shown, the failure’s probable cause is:

Ann wants to hide FTP traffic behind the virtual IP of her cluster. Where is the relevant file
table.def located to make this modification?

While troubleshooting a connectivity issue with an internal web server, you know that
packets are getting to the upstream router, but when you run a tcpdump on the external
interface of the gateway, the only traffic you observe is ARP requests coming from the
upstream router. Does the problem lie on the Check Point Gateway?

In a production environment, your gateway is configured to apply a Hide NAT for all internal
traffic destined to the Internet. However, you are setting up a VPN tunnel with a remote
gateway, and you are concerned about the encryption domain that you need to define on
the remote gateway. Does the remote gateway need to include your production gateway’s
external IP in its encryption domain?