Exam 156-215.80 topic 1 question 415 discussion

https://sc1.checkpoint.com/documents/R80.30/WebAdminGuides/EN/CP_R80.30_Gaia_AdminGuide/html_frameset.htm?topic=documents/R80.30/WebAdminGuides/EN/CP_R80.30_Gaia_AdminGuide/198184 admin - Has full read/write capabilities for all Gaia features, from the Gaia Portal and the Gaia Clish. This user has a User ID of 0, and therefore has all of the privileges of a root user. Notes: You can assign permissions to all Gaia features or a subset of the features without assigning a user ID of 0. If you assign a user ID of 0 to a user account (you can do this only in the Gaia Clish), the user is equivalent to the Admin user and the roles assigned to that account cannot be modified.

The implied rule created is Any>Any>domain-udp>Accept

more suitable: Add tcpdump to CLISH using add command. Create a new access role. Add tcpdump to the role. Create new user with UID 0 and assign role to the user. How to create: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk86583 in this case (test in my lab R80.40) tcpdump directory /usr/sbin/tcpdump and command: add command tcpdump path /usr/sbin/tcpdump description "tcpdump - dump traffic" everything else is according to the above sk86583 but if you do not set the user UID 0, then when you try to execute the command, you will get an access error in the interface (network adapters).