Your customer receives an alert from their network operation center, they are seeing ARP
and Ping scans of their network originating from the firewall. What could be the reason for
the behaviour?

A.
Check Point’s Antibot blade performs anti-bot scans of the surrounding network.

B.
Check Point firewalls probe adjacent networking devices during normal operation.

C.
IPS is disabled on the firewalls and there is a known OpenSSL vulnerability that allows a
hacker to cause a network scan to originate from the firewall.

D.
One or both of the firewalls in a cluster have stopped receiving CCP packets on an
interface.