3 Comments on “Static NAT connections, by default, translate on which firewall kernel inspection point?”

1. sean says:

   February 10, 2013 at 5:40 pm

   should this not be A, packets are translated on the post-in side of the interface

   
   
   
   0

   
   
   
   0
2. Mr A says:

   April 12, 2013 at 7:34 am

   I agree, the answer should be A

   
   
   
   0

   
   
   
   0
3. FH says:

   May 28, 2014 at 4:49 pm

   Agree A: Post-Inbound

   FW Monitor Functionality

   There are four inspection points when a packet passes through a Security Gateway:

   Before the FireWall Virtual Machine, in the inbound direction – Pre-Inbound – marked as ‘i’

   After the FireWall Virtual Machine, in the inbound direction – Post-Inbound – marked as ‘I’

   Before the FireWall Virtual Machine, in the outbound direction – Pre-Outbound – marked as ‘o’

   After the FireWall Virtual Machine, in the outbound direction – Post-Outbound – marked as ‘O’

   From : https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk30583

   
   
   
   0

   
   
   
   0