1.

What is Order of Rule Enforcement in Rule Base?

Answer»

Packets are INSPECTED sequentially by Check Point Security Gateways. Upon RECEIVING a packet belonging to a CONNECTION, the Security Gateway compares the data (destination, source, etc.) against the FIRST rule, then the second rule, the third rule, and so on. As soon as it finds a rule that matches, it stops checking and applies the ACTION of that particular rule to the packet. If the packet does not match any of the rules, then it is denied. 



Discussion

No Comment Found