Which statement describes an ALG?
A.
An ALG intercepts and analyzes all traffic, allocates resources, and defines dynamic policies to deny the
traffic.
B.
An ALG intercepts and analyzes the specified traffic, allocates resources, and defines dynamic policies to
permit the traffic to pass.
C.
An ALG intercepts and analyzes the specified traffic, allocates resources, and defines dynamic policies to
deny the traffic.
D.
An ALG intercepts and analyzes all traffic, allocates resources, and defines dynamic policies to permit the
traffic to pass.
An ALG is a software process used to associate multiple connections from an application with the initial session that application
creates. Each ALG must be designed for a specific protocol, and all ALGs function slightly differently from each other.
The ALG module, which is part of the flow module on SRX devices, is responsible for Application-Layer-aware processing. The
ALG processing is performed in both the first-path and the fast-path. When the initial packet is received, the first path sets up
the ALG vector and the fast-path applies the ALG.
For an ALG to performs its role, it must do the following:
• Inspect the packet for an embedded IP address and port information in the packet payload;
• Open a gate for the IP address and port number to permit data exchange for the session; and
• Perform Network Address Translation (NAT) processing if necessary.
0
0