What’s true about Troubleshooting option in the IPS profile properties?
A. Temporarily change the active protection profile to "Default_Protection"
B. Temporarily set all protections to track (log) in SmartView Tracker
C. Temporarily will disable IPS kernel engine
D. Temporarily set all active protections to Detect
|
Download Printable PDF. VALID exam to help you PASS. |
 |
This one is rather confusing. Unless you are controlling pre-R80.xx gateways in a R80.xx SmartConsole there is no dedicated IPS Policy. It’s rolled into the Threat Prevention Policy and there are no such troubleshooting options to be find on the Threat Prevention Policy.
The admin guide is describing this for IPS Troubleshooting on R80.xx:
Troubleshooting IPS for a Security Gateway
IPS includes the ability to temporarily stop protections on a Security Gateway set to Prevent from blocking traffic. This is useful when troubleshooting an issue with network traffic.
To enable Detect-Only for Troubleshooting:
In SmartConsole, click Gateways & Servers and double-click the Security Gateway.
The gateway window opens and shows the General Properties page.
From the navigation tree, click IPS.
In the Activation Mode section, click Detect Only.
Click OK.
Install Policy.
All protections set to Prevent allow traffic to pass, but continue to track threats according to the Track setting.
If we are to go by this the correct option should be D.
To enable Detect-Only for Troubleshooting:
1. Select IPS > Profiles.
2. Select a profile and click Edit. The Profile Properties window appears.
3. Select Troubleshooting.
4. Click on the Detect-Only for Troubleshooting icon.
Once you have done this, all protections set to Prevent will allow traffic to pass, but will continue to track threats according to its Track configuration.
It’s D