You are using interface-based NAT for traffic passing from the trust zone to the untrust zone.What will occur?
You have configured a single-port VIP to forward HTTP traffic from the untrust interface on your ScreenOS device to an internal Web server. You have configured a policy to allow this traffic. Traffic from the untrust interface that matches this policy is unable to connect to the Web server. What is a solution to this problem?
You must verify on your ScreenOS device that you have configured the correct tunnel peer and determine which IKE proposals the remote device is sending and accepting.Which command should you use?
You are building an IPsec VPN and want to authenticate and encrypt the content.Which two Phase 1/Phase 2 (P1/P2) proposals would achieve this goal? (Choose two.)
You are configuring a VPN with IKE between headquarters and a branch office that uses a dynamic public IP address. Which IKE mode should you use?
Which ScreenOS security feature helps protect against port scans and denial of service attacks?