Exam 156-315.80 topic 1 question 40 discussion

ACCEPT template is enable by default (see P403 of CCSE R80 manual)

Accept template is enabled by Default, correct answer is A

if Accept AND NAT Templates are enabled by default... is then none the right answer?? strange and weird question

A seems to be correct.

NAT and Accept templates are both enabled by default. For NAT templates , the Accept templates must be enabled. Drop templates are disabled by default. Reference CCSE R81.10 Page 325

Accept templates enabled by default

A is correct

A is correct.

Had this question today in exam. I have selected A.

Answer A. Accept template is enabled by default

NAT Templates — Generated to achieve high session rate for NAT. These templates are supported in cluster HA/VRRP and Load Sharing modes. NAT templates are controlled by global kernel parameters and are enabled by default. Drop Templates — Generated by policy rules to accelerate the speed at which a connection is dropped by matching a new connection to a set of attributes. Subsequent connections are dropped without performing a rule match and are therefore accelerated. Drop template acceleration is also performed only on connections with the same destination port. These templates are disabled by default. Accept Templates — Created when a connection is established by matching a new connection to a particular set of attribut es. Subsequent connections are established without performing a rule match and are therefore accelerated. Accept templates are enabled by default and generated from activ e connections according to policy rules.

SecureXL NAT Templates feature in SecureXL is disabled by default on Check Point Security Gateway R80.10 and below. All template handling in versions R80.20 and above has moved to the Firewall, and is not relevant to SecureXL .

from CCSE R80 guide: Accept Templates — Created when a connection is established by matching a new connection to a particular set of tuple attributes. Subsequent connections are established without performing a rule match and are therefore accelerated. Accept templates are enabled by default and generated from active connections according to policy rules. Accept template acceleration is only on connections with the same destination port.

In R80.30 i'm seeing : Accept/drop/NAT all enabled !

[Expert@gw1:0]# fwaccel stat Accelerator Status : on Accept Templates : enabled Drop Templates : disabled NAT Templates : disabled by user NMR Templates : enabled NMT Templates : enabled as you can see, by default, accept templates is enabled.