Q: Are address translations done before or after sending the packet through the rulebase?
A: After. According to Phoneboy's Firewall-1 NG book, any address translations are only done after the packet has cleared the rulebase.
Unless otherwise noted, these answers all pertain to Nokia enforcement points running IPSO 3.8.1 or IPSO 4.1 and Checkpoint R55P, and a Windows management console. Note: following some links into the Nokia support site will require logging onto the site before clicking on the link.
0 Comments:
Post a Comment
<< Home