what order should the policy statements be in?

Exhibit

In order for this policy to be effective, what order should the policy statements be in? The number refers to the Policy ID shown in the diagram.

In order for this policy to be effective, what order should the policy statements be in? The number refers to the Policy ID shown in the diagram.

A.
12345

B.
34251

C.
45321

D.
52134

E.
53124

Explanation:
The NetScreen device checks all attempts to traverse the firewall against policies, beginning with the first one listed in the policy set for the appropriate list and moving through the list. Because the NetScreen device applies the action specified in the policy to the first matching policy in the list, you must arrange them from the most specific to the most general. Policy ID 3 is the most specific policy because the Src-address and Dst-address have a subnetmask of 32. So only 1 ip address for the source and 1 ip address for the destination.



Leave a Reply 0

Your email address will not be published. Required fields are marked *