Exam4Training

What needs to be configured if the NAT property ‘Translate destination on client side’ is not enabled in Global properties?

What needs to be configured if the NAT property ‘Translate destination on client side’ is not enabled in Global properties?
A . A host route to route to the destination IP
B . Use the file local.arp to add the ARP entries for NAT to work
C . Nothing, the Gateway takes care of all details necessary
D . Enabling ‘Allow bi-directional NAT’ for NAT to work correctly

Answer: C

Explanation:

If the NAT property ‘Translate destination on client side’ is not enabled in Global properties, nothing needs to be configured on the client side, because the Gateway takes care of all details necessary. The Gateway translates the destination IP address before sending the packet to the client, so the client does not need to know about the NAT rule or add any host route or ARP entry.

Reference: Check Point Security Engineering Study Guide, p. 136-137

Exit mobile version