How do new connections get established through a Security Gateway with SecureXL
enabled?

A.
New connections are always inspected by the firewall and if they are accepted, the
subsequent packets of the same connection will be passed through SecureXL

B.
New connection packets never reach the SecureXL module.

C.
The new connection will be first inspected by SecureXL and if it does not match the drop
table of SecureXL, then it will be passed to the firewall module for a rule match.

D.
If the connection matches a connection or drop template in SecureXL, it will either be
established or dropped without performing a rule match, else it will be passed to the firewall
module for a rule match.