What happen when IPS profile is set in Detect Only Mode for troubleshooting?
A . It will generate Geo-Protection traffic
B . Automatically uploads debugging logs to Check Point Support Center
C . It will not block malicious traffic
D . Bypass licenses requirement for Geo-Protection control
Answer: C
Explanation:
It is recommended to enable Detect-Only for Troubleshooting on the profile during the initial installation of IPS. This option overrides any protections that are set to Prevent so that they will not block any traffic. During this time you can analyze the alerts that IPS generates to see how IPS will handle network traffic, while avoiding any impact on the flow of traffic.
Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_IPS_AdminGuide/12750.htm
Leave a Reply