What are two (2) benefits of configuring the NetScreen in transparent mode?
A.
There is no need for IP addresses even for remote management
B.
There is no need to reconfigure the IP addresses of routers or protected servers
C.
There is no need to create Mapped or Virtual IPs for incoming traffic to reach protected servers
D.
Policies are easier to crate since you do not have to include Source and Destination IP addresses
E.
The product can support more VPNs and obtain greater throughput because there is less overhead to manage
Explanation:
When an interface is in Transparent mode, the NetScreen device filters packets traversing the firewall without
modifying any of the source or destination information in the IP packet header. All interfaces behave as though they are part of the same network, with the NetScreen device acting much like a Layer 2 switch or bridge. In Transparent mode, the IP addresses of interfaces are set at 0.0.0.0, making the presence of the NetScreen device invisible, or "transparent," to users. By default, ScreenOS creates one function zone, the VLAN zone, and three L2 security zones: V1-Trust, V1-Untrust, and V1-DMZ. When the NetScreen device is in Transparent mode, you use the VLAN1 interface for managing the device and terminating VPN traffic. Transparent mode is a convenient means for protecting Web servers, or any other kind of server that mainly receives traffic from untrusted sources. Using Transparent mode offers the following benefits:
No need to reconfigure the IP settings of routers or protected servers No need to create Mapped or Virtual IP addresses for incoming traffic to reach protected servers