When you add a resource object to a rule, which of the following occurs?
A.
All packets that match the resource will be dropped.
B.
All packets matching that rule are either encrypted or decrypted by the defined resource.
C.
All packets matching the resource service are analyzed through an application-layer proxy.
D.
Users attempting to connect to the destination of the rule will be required to authenticate.
I think answer should be D.
C is the correct answer.
from https://sc1.checkpoint.com/documents/R76/CP_R76_SGW_WebAdmin/6744.htm
When a packet is matched to a rule that contains a resource, the Inspection Module on a Security Gateway diverts a connection to a Security server (proxy server). The Security server performs the Application Security checks, and, if necessary, diverts the connection to a Content Vectoring Protocol (CVP) server application. The Security server then returns the connection to the Inspection Module, which opens a second connection that is sent on the destination HTTP server.