To increase the security of your NOC, you decide to install a NOC firewall and hire a firewall
expert to manage it. The firewall expert wants to hide all of the invalid IP addresses of the CMAs,
by installing a Hide NAT Policy on the firewall. Will this plan work?

A.
No, because VPN-1 NGX does not allow Administrators to configure Hide NAT on objects with
assigned virtual IP addresses.

B.
No, because Hide NAT does not allow remote Gateways to connect directly to the CMAs.

C.
Yes, but only if Hide NAT is configured with the Hide address of the leading MDS interface.

D.
Yes, because the CMAs use virtual IP addresses, and they require a single valid IP address to
manage remote Security Gateways.

Explanation: