Which file should be edited to modify ClusterXL VIP Hide NAT rules, and where?

Which file should be edited to modify ClusterXL VIP Hide NAT rules, and where?

Which file should be edited to modify ClusterXL VIP Hide NAT rules, and where?

A.
$FWDIR/lib/base.def on the SMC

B.
$FWDIR/lib/base.def on the cluster members

C.
$FWDIR/lib/table.def on the SMC

D.
$FWDIR/lib/table.def on the cluster members

Explanation:



Leave a Reply 1

Your email address will not be published. Required fields are marked *


steve

steve

In sk98339: The “table.def” file is a placeholder for definitions of various kernel tables for Check Point Security Gateway. Definitions can be modified and added by the administrator (in Check Point INSPECT language). For example, allowing specific IP options in the packets, controlling whether to hide specific traffic behind Cluster Virtual IP address, etc.

All the changes made in this file are transferred to the managed Security Gateway / Cluster during policy installation.