What are two (2) benefits of configuring theNetScreenin transparent mode?
There is no need for IP addresses even for remote management
There is no need to reconfigure the IP addresses of routers or protected servers
There is no need to create Mapped or VirtualIPsfor incoming traffic to reach protected servers
Policies are easier to crate since you do not have to include Source and Destination IP addresses
The product can support moreVPNs and obtain greater throughput because there is less overhead to manage
When an interface is inTransparentmode, theNetScreendevice filters packets traversing the firewall without
modifyingany of the source or destination information in the IP packet header. All interfaces behave as though they are part of the same network, with theNetScreendevice acting much like a Layer 2 switch or bridge. In Transparent mode, the IP addresses of interfaces are set at 0.0.0.0, making the presence of theNetScreendevice invisible, or "transparent," to users. By default, ScreenOScreates one function zone, the VLAN zone, and three L2 security zones: V1-Trust, V1-Untrust, and V1-DMZ.
When theNetScreendevice is inTransparentmode, you use the VLAN1 interface for managing the device and terminating VPN traffic. Transparent mode is a convenient means for protecting Web servers, or any other kind of server that mainly receives traffic fromuntrustedsources. Using Transparentmode offers the following benefits:
No need to reconfigure the IP settings of routers or protected servers No need to create Mapped or Virtual IP addresses for incoming traffic to reach protected servers