Which of the following allows you to capture packets at four inspection points as they traverse a Check Point gateway?

Which of the following allows you to capture packets at four inspection points as they traverse a Check Point gateway?
A . tcpdump
B . Firewall logs
C . Kernel debugs
D . fw monitor

View Answer

Answer: D

Explanation:

The fw monitor tool allows packet capture at multiple inspection points within a Check Point gateway, typically four in total. This capability provides comprehensive visibility into how packets are processed as they move through different stages of the firewall’s inspection chain, facilitating effective troubleshooting and analysis.