URL Filtering is an essential part of Web Security in the Gateway. For the Security Gateway to perform a URL lookup when a client makes a URL request, where is the sync-request forwarded from if a sync-request is required?
A. RAD Kernel Space
B. URLF Kernel Client
C. URLF Online Service
D. RAD User Space
Another example of many wrongly formulated questions by Checkpoint due to lack of basic logic knowledge and command of English. However, since the question is “….forwarded from…” and not “…sent from…” it does not matter which part has actually sent (initiated the sending) of the sync request, but the one that forwarded the request which means answer A should be correct. But I am pretty sure that the one who formulated this question have never thought that deeply so the actual correct answer in the answerkey might be either A or B.
Proces from the book:
1. URL lookup initiated by the client.
2. URL lookup occurs in the kernel cache.
3. The kernel cache notifies the RA D kernel of hi ts and misses.
4. RAD provides the status of the search to the client.
5. The client sends an a-sync request back to RAD if the URL was not found.
6. The a-sync request is forwarded to the RAD User space via the R AD kernel for online categorization.
7. The online detection service resp onds with categories and the k ernel cache is updated.
It is sended (step 6) via RAD kernel, but step 5 initiated from the URLF Kernel Client. So to me it looks like (B) is the answer.
“A” is correct as the URLF Kernel sends the a-sync to the RAD kernel and the RAD kernel forwards it to the RAD user space. This is indeed what the CCSM training guide says as well
Tricky question. The question is where the is the sync-request forwarded FROM if a sync-request is required?
Then the answer is B.
this is an english usage question more than a tech question lol
The response is “B” because if you analyze “URL Filtering Categorization Flow” in this post https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk92743&partition=Advanced&product=URL (ATRG: URL Filtering – sk92743) you find that the entity which starts sync-request is URLF kernel client if there is no URL in the cache, asking for online categorization. URLF kernel client is entity “from” whom a sync-request is required.
Please confirm.
Page 286 of the training manual
The client sends an a-sync request back to RAD if the URL was not found.
The a-sync request is forwarded to the RAD User space via the RAD kernel for online categorization.
So based on this I believe the answer should be ‘A’
Hello, can you share us training manual documents you got?
The link below is about RAD errors and Timoty_Hall’s post says:
“This causes a big flurry of URL categorization lookups by rad (and high CPU load) as it repopulates the cache.”
He mentions sk90422 too, which is specific for URL Filter blade and issues.
Based on that informations I think valid answers should be: “A – RAD Kernel Space” or “B – URLF Kernel Cache” (Not URLF Kernel Client as answer shows.)
https://community.checkpoint.com/t5/General-Topics/RAD-kernel-errors/td-p/22777
Anyone can confirm?
Thanks.