What happen when IPS profile is set in Detect Only Mode for troubleshooting?

What happen when IPS profile is set in Detect Only Mode for troubleshooting?
A . It will generate Geo-Protection traffic
B . Automatically uploads debugging logs to Check Point Support Center
C . It will not block malicious traffic
D . Bypass licenses requirement for Geo-Protection control

Answer: C

Explanation:

It is recommended to enable Detect-Only for Troubleshooting on the profile during the initial installation of IPS. This option overrides any protections that are set to Prevent so that they will not block any traffic. During this time you can analyze the alerts that IPS generates to see how IPS will handle network traffic, while avoiding any impact on the flow of traffic.

Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_IPS_AdminGuide/12750.htm

Subscribe
Notify of
guest
0 Comments
Inline Feedbacks
View all comments