You just installed a new Web server in the DMZ that must be reachable from the Internet. You create a manual Static NAT rule as follows:

“web_public_IP” is the node object that represents the new Web server’s public IP address. “web_private_IP” is the node object that represents the new Web site’s private IP address. You enable all settings from Global Properties > NAT.

When you try to browse the Web server from the Internet, you see the error “page cannot be displayed”. Which statements are possible reasons for this?

i). There is no route defined on the Security Gateway for the public IP address to the Web server’s private IP address.

ii) There is no Security Policy defined that allows HTTP traffic to the protected Web server.

iii) There is an ARP entry on the Gateway but the settings Merge Manual proxy ARP and Automatic ARP configuration are enabled in Global Properties. The Security Gateway ignores manual ARP entries.

iv) There is no ARP table entry for the protected Web server’s public IP address.

Identity Awareness is implemented to manage access to protected resources based on a user’s _____________.

[tagged]
What CANNOT be configured for existing connections during a policy install?

Once an Access Role is configured, in which Rule Bases can it be implemented?

To check the Rule Base, some rules can be hidden so they do not distract the administrator from the unhidden rules. Assume that only rules accepting HTTP or SSH will be shown. How do you accomplish this?

What command syntax would you use to turn on PDP logging in a distributed environment?

Nancy has lost SIC communication with her Security Gateway and she needs to re-establish SIC. What would be the correct order of steps needed to perform this task?

1) Create a new activation key on the Security Gateway, then exit cpconfig.

2) Click the Communication tab on the Security Gateway object, and then click Reset.

3) Run the cpconfig tool, and then select Secure Internal Communication to reset.

4) Input the new activation key in the Security Gateway object, and then click initialize

5) Run the cpconfig tool, then select source Internal Communication to reset.

The third-shift Administrator was updating Security Management Server Access settings in Global Properties and testing. He managed to lock himself out of his account. How can you unlock this account?

[tagged]
You run cpconfig to reset SIC on the Security Gateway. After the SIC reset operation is complete, the policy that will be installed is the:

What is true about the Rule Base shown?

(i). HTTP traffic from webrome to websingapore will be encrypted

(ii). HTTP traffic from websingapore to webrome will be encrypted

(iii). HTTP traffic from webrome ro websingapore will be encrypted

(iv). HTTP traffic from websingapore to webromw will be blocked