At which step in the packet flow are Junos Screen checks applied?
A.
prior to the route lookup
B.
prior to security policy processing
C.
after ALG services are applied
D.
after source NAT services are applied
which step in the packet flow are Junos Screen checks applied?
At which step in the packet flow are Junos Screen checks applied?
i think A should be right , because Screen check is priority to D-NAT process.
I also think A is right the flow is :
Screen->D-nat->Route->Zones->Policy->SNat->ALG->Session
A
I agree option A is correct, however because the Juniper study guide says “the main advantage of using Screen options is that the Junos OS performs Screen checks prior to security policy processing, which results in fewer resources used for malicious packet processing”, I would choose option B.