How do new connections get established through a Security Gateway with SecureXL enabled?
A.
The new connection will DC first inspected by SecureXL and if it does not match the drop table
of SecureXL. Then it will be passed to the firewall module for a rule match.
B.
If the connection matches a connection of drop template in SecureXL. It will either be
established or dropped without performing a rule match, else it win be passed to the firewall
module for a rule match.
C.
new connections are always inspected by the firewall and if they are accepted, the subsequent
packets of the same connection will be passed through SecureXL
D.
New connection packets never reach the SecureXL module
Explanation:
By a more recent post, correct answer is B.
On sk32578 you can find the following statement:
“When SecureXL is enabled, all traffic should be accelerated, except traffic that matches the following conditions:
The first packets of any new TCP session, unless a “template” exists.
…”