Your company enforces a strict change control policy. Which of the following would be MOST effective for quickly dropping an attacker's specific active connection?
A.
Change the Rule Base and install the Policy to all Security Gateways
B.
Block Intruder feature of SmartView Tracker
C.
Intrusion Detection System (IDS) Policy install
D.
SAM ג€" Suspicious Activity Rules feature of SmartView Monitor
in R76-R77 main tool SmartView Tracer - Block Intruder feature of SmartView Tracker
in R80 main tool SmartView Monitor - SAM - Suspicious Activity Rules feature of SmartView Monitor
Suspicious Action Rules — In SmartView Monitor, suspicious network activity can be blocked while investigating the real risk or to quickly block an obvious intruder.
CCSS R80 GUIDE P.509
The key word is "active connection" So
Using Block Intruder
SmartView Tracker allows you to terminate an active connection and block further connections from and to specific IP addresses.
Good point.
I believe in the question keyword is "quickly".
Compare both the steps of block intruder and SAM yourself and you will know the answer.
https://sc1.checkpoint.com/documents/R76/CP_R76_SmartViewTracker_AdminGuide/89751.htm
https://sc1.checkpoint.com/documents/R76/CP_R76_SmartViewMonitor_AdminGuide/17670.htm
Correction.
SmartViewTacker is still available in R80, but SmartLog is the preferred option.
SmartViewTracker can be found here
C:\Program Files (x86)\CheckPoint\SmartConsole\R80.30\PROGRAM\CPlgv.exe
upvoted 2 times
...
...
...
...
Log in to ExamTopics
Sign in:
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
babochnik
2 months agodjreymix
1 year agovitera
1 year, 7 months agoeww_cybr
2 years agolohitnadimpalli
2 years, 2 months ago[Removed]
2 years, 3 months agoKelassal
2 years, 5 months agoNickname_00
2 years, 4 months agoC4rlos
2 years, 3 months agoC4rlos
2 years, 2 months ago