Watchguard Network Security
Essentials Exam Questions with 100%
Correct Solutions
EVERY COMPOUTER ON AN INTERNAL NETWORK WOULD HAVE A (FAKE) EXTERNAL
IP ADDRESS
When you enable 1-to-1 NAT, your Firebox maps one or more private IP addresses to
one or more public IP addresses. This allows you to make internal network resources
like a mail server accessible on the internet.
You can apply 1-to-1 NAT to one IP address, a range of addresses, or a subnet. A 1-to-1
NAT rule always has precedence over dynamic NAT.
To connect to a computer located on a different interface that uses 1-to-1 NAT,
you must use that computer's public (NAT base) IP address. If this is a problem, you
can disable 1-to-1 NAT and use static NAT.
On most networks, we recommend that you configure SNAT rather than 1-to-1 NAT.
The combination of SNAT and DNAT is more flexible than 1-to-1 NAT and can do
everything that 1-to-1 NAT can do. For information about SNAT, see About SNAT.
What is NAT Loopback?
ALLOWS A SERVER TO BE ACCESSED BY IT'S PRIVATE OR PUBLIC. EVERY SERVER HAS A
PRIVATE AND PUBLIC IP, THIS ALLOWS FOR THE COMPUTER TO ACCESSS THE SERVER
USING ITS PUBLIC IP ADDRESS.
,If you're on the LAN you could RDP locally with the private IP. Or you would be able to
use the public IP address in a browser, and the firewall knows the public and the
private are the same.
NAT loopback enables a user on the trusted or optional networks to connect to a public
server with the public IP address or domain name of the server, if the server is on the
same physical Firebox interface. For NAT loopback connections, the Firebox changes
the source IP address to the IP address of the internal Firebox interface (the primary IP
address for the interface where the client and server both connect to the Firebox).
What is Static NAT?
PORT FORWARDING-
Static NAT (SNAT), also known as port forwarding, is a port-to-host NAT. With static
NAT, when a host sends a packet from a network to a port on an external or
optional interface, static NAT changes the destination IP address to an IP address
and port behind the firewall.
If a software application uses more than one port and the ports are selected
dynamically, you must either use 1-to-1 NAT, or check whether a proxy on your Firebox
manages this kind of traffic. Static NAT also operates on connections from networks
that your Firebox protects.
What is a full tunnel (default route) VPN?
Default-route is the most secure option because it routes all Internet traffic from a
remote user through the VPN tunnel to the Firebox. Then, the traffic is sent back out
to the Internet. With this configuration, the Firebox can examine all traffic and provide
increased security. Be aware that this option requires more processing power and
bandwidth.
, What is a split tunnel VPN?
With split tunnel, users can browse the Internet, but their Internet traffic is not
sent through the VPN tunnel. A split tunnel VPN has better network performance
than a default route VPN. However, split tunneling decreases security because the
Firebox policies you create are not applied to the Internet traffic.
What order do you read policies?
Port>from>to
How does Default threat protection work?
Default Threat Protection is the first line of defense, and takes precedence over
configured policy rules and other services.
With default threat protection, the firewall examines the source and destination of each
packet it receives. It looks at the IP address and port number and monitors the packets
to look for patterns that show your network is at risk. If a risk exists, you can configure
the Firebox to automatically block a possible attack.
Default Threat Protection has three configurable components:
Blocked Ports
Blocked Sites
Default Packet Handling
Requirements for Intelligent AV?
Hardware-Firebox M-series (except M200/M300)
Virutal-Firebox Cloud and FireboxV (VM must have 4GB RAM)
How does link monitor work?
Essentials Exam Questions with 100%
Correct Solutions
EVERY COMPOUTER ON AN INTERNAL NETWORK WOULD HAVE A (FAKE) EXTERNAL
IP ADDRESS
When you enable 1-to-1 NAT, your Firebox maps one or more private IP addresses to
one or more public IP addresses. This allows you to make internal network resources
like a mail server accessible on the internet.
You can apply 1-to-1 NAT to one IP address, a range of addresses, or a subnet. A 1-to-1
NAT rule always has precedence over dynamic NAT.
To connect to a computer located on a different interface that uses 1-to-1 NAT,
you must use that computer's public (NAT base) IP address. If this is a problem, you
can disable 1-to-1 NAT and use static NAT.
On most networks, we recommend that you configure SNAT rather than 1-to-1 NAT.
The combination of SNAT and DNAT is more flexible than 1-to-1 NAT and can do
everything that 1-to-1 NAT can do. For information about SNAT, see About SNAT.
What is NAT Loopback?
ALLOWS A SERVER TO BE ACCESSED BY IT'S PRIVATE OR PUBLIC. EVERY SERVER HAS A
PRIVATE AND PUBLIC IP, THIS ALLOWS FOR THE COMPUTER TO ACCESSS THE SERVER
USING ITS PUBLIC IP ADDRESS.
,If you're on the LAN you could RDP locally with the private IP. Or you would be able to
use the public IP address in a browser, and the firewall knows the public and the
private are the same.
NAT loopback enables a user on the trusted or optional networks to connect to a public
server with the public IP address or domain name of the server, if the server is on the
same physical Firebox interface. For NAT loopback connections, the Firebox changes
the source IP address to the IP address of the internal Firebox interface (the primary IP
address for the interface where the client and server both connect to the Firebox).
What is Static NAT?
PORT FORWARDING-
Static NAT (SNAT), also known as port forwarding, is a port-to-host NAT. With static
NAT, when a host sends a packet from a network to a port on an external or
optional interface, static NAT changes the destination IP address to an IP address
and port behind the firewall.
If a software application uses more than one port and the ports are selected
dynamically, you must either use 1-to-1 NAT, or check whether a proxy on your Firebox
manages this kind of traffic. Static NAT also operates on connections from networks
that your Firebox protects.
What is a full tunnel (default route) VPN?
Default-route is the most secure option because it routes all Internet traffic from a
remote user through the VPN tunnel to the Firebox. Then, the traffic is sent back out
to the Internet. With this configuration, the Firebox can examine all traffic and provide
increased security. Be aware that this option requires more processing power and
bandwidth.
, What is a split tunnel VPN?
With split tunnel, users can browse the Internet, but their Internet traffic is not
sent through the VPN tunnel. A split tunnel VPN has better network performance
than a default route VPN. However, split tunneling decreases security because the
Firebox policies you create are not applied to the Internet traffic.
What order do you read policies?
Port>from>to
How does Default threat protection work?
Default Threat Protection is the first line of defense, and takes precedence over
configured policy rules and other services.
With default threat protection, the firewall examines the source and destination of each
packet it receives. It looks at the IP address and port number and monitors the packets
to look for patterns that show your network is at risk. If a risk exists, you can configure
the Firebox to automatically block a possible attack.
Default Threat Protection has three configurable components:
Blocked Ports
Blocked Sites
Default Packet Handling
Requirements for Intelligent AV?
Hardware-Firebox M-series (except M200/M300)
Virutal-Firebox Cloud and FireboxV (VM must have 4GB RAM)
How does link monitor work?
