Welcome to ExamTopics
ExamTopics Logo
- Expert Verified, Online, Free.
Mail Us [email protected]
Menu

Unlimited Access

Get Unlimited Contributor Access to the all ExamTopics Exams!
Take advantage of PDF Files for 1000+ Exams along with community discussions and pass IT Certification Exams Easily.
Checkpoint Discussions

Exam 156-215.80 topic 1 question 102 discussion

Actual exam question from Checkpoint's 156-215.80
Question #: 102
Topic #: 1
[All 156-215.80 Questions]

The Administrator wishes to update IPS protections from SmartConsole by clicking on the option `Update Now` under the Updates tab in Threat Tools. Which device requires internet access for the update to work?

  • A. Security Gateway only
  • B. Only the device where SmartConsole is installed
  • C. Only the Security Management Server
  • D. Either the Security Management Server or device where SmartConsole is installed
Show Suggested Answer Hide Answer
Suggested Answer: B 🗳️
Updating IPS Manually -
You can immediately update IPS with real-time information on attacks and all the latest protections from the IPS website. You can only manually update IPS if a proxy is defined in Internet Explorer settings.
To obtain updates of all the latest protections from the IPS website:
1. Configure the settings for the proxy server in Internet Explorer.
1.In Microsoft Internet Explorer, open Tools > Internet Options > Connections tab > LAN Settings.
The LAN Settings window opens.
2.Select Use a proxy server for your LAN.
3.Configure the IP address and port number for the proxy server.
4.Click OK.
The settings for the Internet Explorer proxy server are configured.
2. In the IPS tab, select Download Updates and click Update Now.
If you chose to automatically mark new protections for Follow Up, you have the option to open the Follow Up page directly to see the new protections.
Reference:
https://sc1.checkpoint.com/documents/R76/CP_R76_IPS_AdminGuide/12850.htm
by C4rlos at April 17, 2020, 6:16 p.m.

Comments

Chosen Answer:
This is a voting comment (?) , you can switch to a simple comment.
Switch to a voting comment New
Submit Cancel
C4rlos
Highly Voted 4 years ago
The correct answer is C. The question is asking about "update now" option under the IPS tab and SMS needs to have internet access in this case. Yes, you can select "download with SmartConsole" option from the dropdown menu, but the question is asking about "update now" https://sc1.checkpoint.com/documents/R80.30/WebAdminGuides/EN/CP_R80.30_ThreatPrevention_AdminGuide/html_frameset.htm?topic=documents/R80.30/WebAdminGuides/EN/CP_R80.30_ThreatPrevention_AdminGuide/136774
upvoted 8 times
CCSAChallenger
1 year, 4 months ago
Really people dont read. In your doc clearly states, only SmartConsole internet is needed (Download with SmartConsole): To update IPS Protections: In SmartConsole, click Security Policies > Threat Prevention. In the Threat Tools section, click Updates. In the IPS section > Update Now, from the drop-down menu, select: Download with SmartConsole - If your Security Management Server has no internet access. Download with Security Management Server Offline Update - If you want to manually upload the file. Select the required file for the update and click Open. Install Policy.
upvoted 1 times
...
...
mucha
Highly Voted 3 years, 12 months ago
To update IPS Protections: In SmartConsole, click Security Policies > Threat Prevention. In the Threat Tools section, click Updates. In the IPS section > Update Now, from the drop-down menu, select: Download with SmartConsole - If your Security Management Server has no internet access. Download with Security Management Server Offline Update - If you want to manually upload the file. Select the required file for the update and click Open. In this case best fit option "D"
upvoted 5 times
C4rlos
3 years, 11 months ago
You don't have to click to the dropdown menu, you can just click "Update now" and "Download using Security Management server" is preselected as a default option. The question doesn't mention the dropdown menu, just update now button.
upvoted 3 times
...
...
RPM99
Most Recent 2 months, 2 weeks ago
C. Only the Security Management Server The Security Management Server is responsible for managing and updating security policies, including IPS protections. The Security Gateway (option A) enforces these policies but does not directly fetch updates from the internet. SmartConsole (option B) is the management interface, and while it is used to configure policies, the actual update process is initiated by the Security Management Server. Therefore, internet access is needed for the Security Management Server to fetch the latest IPS.
upvoted 1 times
...
CCSAChallenger
1 year, 4 months ago
Selected Answer: D
To update IPS Protections: In SmartConsole, click Security Policies > Threat Prevention. In the Threat Tools section, click Updates. In the IPS section > Update Now, from the drop-down menu, select: Download with SmartConsole - If your Security Management Server has no internet access. Download with Security Management Server Offline Update - If you want to manually upload the file. Select the required file for the update and click Open. Install Policy.
upvoted 1 times
...
Hernan_Mella
1 year, 10 months ago
Selected Answer: B
In the lab the "update now" button doesnt works if my pc doesn't have Internet
upvoted 3 times
...
Dirkd0344
2 years, 1 month ago
They state you are updating from Smart Console. Therefore, you only need Internet on the device with Smart Console. In SmartConsole, click Security Policies > Threat Prevention. In the Threat Tools section, click Updates. In the IPS section > Update Now, from the drop-down menu, select: Download with SmartConsole - If your Security Management Server has no internet access. Download with Security Management Server Offline Update - If you want to manually upload the file. Select the required file for the update and click Open. Install Policy.
upvoted 2 times
Bezos
1 year, 11 months ago
You're contradicting yourself. First, you say "you only need Internet on the device with Smart Console." but in your steps you clarify that " select: Download with SmartConsole - If your Security Management Server has no internet access.". The last part of that statement is key, meaning that you only need internet access from SmartConsole PC, if the SMS does not have internet connectivity
upvoted 2 times
CCSAChallenger
1 year, 4 months ago
He is not, read it again. You can do it without having internet on your SMS, so optional. On the other hand, having internet in SmartConsole is necessary.
upvoted 1 times
...
...
...
sevasokol44
2 years, 8 months ago
"B" and "C" are correct I meen.
upvoted 1 times
...
nayamars
2 years, 10 months ago
After I've used "Update now" option this message popped up: "Failed to get latest package metadata from user center. Please validate SmartConsole connectivity"
upvoted 3 times
...
lucacin
2 years, 11 months ago
https://sc1.checkpoint.com/documents/R80.20_GA/WebAdminGuides/EN/CP_R80.20_ThreatPrevention_AdminGuide/html_frameset.htm?topic=documents/R80.20_GA/WebAdminGuides/EN/CP_R80.20_ThreatPrevention_AdminGuide/136774
upvoted 1 times
...
Aychi
3 years, 5 months ago
B is correct : when you click on "update now" it take the first option This was confirmed by tcpdump (10.1.1.10 is my private IP where smartconsole is installed) 23:18:34.339729 IP 10.1.1.10.53931 > 23.57.81.71.https: R 1366:1366(0) ack 10113 win 0 23:18:34.339745 IP 10.1.1.10.53931 > 23.57.81.71.https: R 1366:1366(0) ack 10113 win 0
upvoted 2 times
...
babajana
3 years, 5 months ago
correct is C CCSA R80 guide Updates require Internet Connectivity and name resolution from the Security Management Server
upvoted 4 times
...

Get IT Certification

Unlock free, top-quality video courses on ExamTopics with a simple registration. Elevate your learning journey with our expertly curated content. Register now to access a diverse range of educational resources designed for your success. Start learning today with ExamTopics!

Start Learning for free
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel