Which statement is true about Packet Logging in IDP?
Which statement is true about Packet Logging in IDP?
What is causing the traffic problem?
— Exhibit —
ssg20-> set address “Trust” “192.168.1.0/32” 10.20.1.0 255.255.255.0
ssg20-> set address “Untrust” “10.204.1.0/24” 10.204.1.0 255.255.255.0
ssg20-> set address “Untrust” “192.168.1.0/24” 192.168.1.0 255.255.255.255
ssg20-> get policy id 1
name:”none” (id 1), zone Trust -> Untrust,action Permit, status “enabled”
src “192.168.1.0/32”, dst “192.168.1.0/24”, serv “FTP”
Rules on this VPN policy: 0
nat off, Web filtering : disabled
vpn unknown vpn, policy flag 00000000, session backup: on, idle reset: on
traffic shaping off, scheduler n/a, serv flag 00
log no, log count 0, alert no, counter no(0) byte rate(sec/min) 0/0
total octets 0, counter(session/packet/octet) 0/0/0
priority 7, diffserv marking Off
tadapter: state off, gbw/mbw 0/0 policing (no)
No Authentication
No User, User Group or Group expression set
— Exhibit —
FTP connections from host 10.20.1.10 to server 192.168.1.100 are not working. You produce the
output shown in the exhibit. What is causing the traffic problem?
How can you view the details of these 26 attacks?
Log Investigator identified26 attacks from a specific source to a specific destination.
How can you view the details of these 26 attacks?
Which statement is correct?
Click the Exhibit button.
In the exhibit, you have configured the MIP address 1.1.8.64 on a ScreenOS device.
Which statement is correct?
Which three statements about the ESP are true?
Which three statements about the ESP are true? (Choose three.)
What information is provided by the host table (Choose three.)
What information is provided by the host table (Choose three.)
What would you use to configure this behavior?
Click the Exhibit button.
In the network shown in the exhibit, you have been asked to enable users in the Untrust zone to
contact Server1 on TCP port 80 using IP address 1.1.1.1. You also need to allow Server1 to make
connections to hosts in the Untrust zone. When Server1 makes connections to the Untrust zone, the
source address of its traffic should be translated to 1.1.1.1.
What would you use to configure this behavior?
Which two does ESP use to help identify applications running on certain hosts?
Which two does ESP use to help identify applications running on certain hosts?
(Choose two.)
Which command would you use to accomplish this task?
— Exhibit —
ssg5(M)-> get conf | incl ethernet1/2
set interface “ethernet1/2” zone “Untrust”
set interface ethernet1/2 ip 10.0.0.1/24
set interface ethernet1/2 route
set interface “ethernet1/2” description “Internet Connection 1”
set interface ethernet1/2 ip manageable
set interface ethernet1/2 manage ping
— Exhibit —
You need to add a DIP pool to the interface shown in the exhibit. The DIP pool has been assigned the
IP addresses 20.20.20.1 through 20.20.20.10.
Which command would you use to accomplish this task?
What is a Violation Object in ESP?
What is a Violation Object in ESP?