Exam 156-215.81 topic 1 question 125 discussion

The correct answer is: A. After successful initialization, the gateway can communicate with any Check Point node that possesses a SIC certificate signed by the same ICA. This statement best describes Secure Internal Communication (SIC). After the initial trust is established, the Security Gateway can securely communicate with other Check Point components that have a SIC certificate signed by the same Internal Certificate Authority (ICA).

Thats why you dont need SIC between cluster members

Check Point Certified Security Administrator (CCSA) R81.10 Guide (page 111): "The purpose of the communication initialization process is to establish a trust between the Security Management Server and Check Point Gateways. This trust lets these components communicate freely and securely. Trust can only be established when the Gateways and the Security Management Server have been issued SIC certificates. After successful initialization, the Gateway can communicate with any Check Point node that possesses a SIC certificate signed by the same ICA."

Correct. https://sc1.checkpoint.com/documents/R81/WebAdminGuides/EN/CP_R81_SecurityManagement_AdminGuide/Topics-SECMG/Secure-Internal-Communication.htm