Which file should be edited to modify ClusterXL VIP Hide NAT rules, and where?
A.
$FWDIR/lib/base.def on the SMC
B.
$FWDIR/lib/base.def on the cluster members
C.
$FWDIR/lib/table.def on the SMC
D.
$FWDIR/lib/table.def on the cluster members
Explanation:
In sk98339: The “table.def” file is a placeholder for definitions of various kernel tables for Check Point Security Gateway. Definitions can be modified and added by the administrator (in Check Point INSPECT language). For example, allowing specific IP options in the packets, controlling whether to hide specific traffic behind Cluster Virtual IP address, etc.
All the changes made in this file are transferred to the managed Security Gateway / Cluster during policy installation.
1
0