In Wire mode. if a packet reaches the gateway from a trusted source and is destined to a trusted
destination, will the firewall do stateful inspection?
A.
No, but IPS inspection will still be enforced.
B.
Yes, the Firewall always performs stateful inspection.
C.
Yes, but only if SecureXL is disabled.
D.
No
When a packet reaches a Security Gateway, the Security Gateway asks itself two questions regarding the packet(s):
Is this information coming from a “trusted” source?
Is this information going to a “trusted” destination?
If the answer to both questions is yes, and the VPN Community to which both Security Gateways belong is designated as “Wire Mode enabled,” stateful inspection is not enforced and the traffic between the trusted interfaces bypasses the firewall.
1
0