You have enabled "Extended Log" as a tracking option to a security rule. However, you are still not seeing any data type information. What is the MOST likely reason?
You have enabled "Extended Log" as a tracking option to a security rule. However, you are still not seeing any data type information. What is the MOST likely reason?
To see data type information, Content Awareness needs to be enabled. If Content Awareness is not enabled, Extended Log will not capture data type information, even if it is enabled as a tracking option.
Content awareness speaks about data type which was mentioned in the question. Answer would be D
First words of the question: You have enabled "Extended Log". If Content Awareness was not enabled, you would not be able to enable Extended Logging. So D is incorrect.
Trick question, note that Extended logs option is only available if you have switched on one of the content awareness blades. The question implies the blade is on else you will not see the extended logs options
Content awareness needs to be enabled to see information about data types.
Without the required blades enabled extended logging is not selectable, trick question indeed
Checkpoint R81 Certified Security Administrator Guide page 553: Detailed Log and Extended Log are only available if one or more of these Blades are enabled on the Layer: Application & URL Filtering, Content Awareness, or Mobile Access.
Detailed Log and Extended Log are only available if one or more of these Blades are enabled on the Layer: Application & URL Filtering, Content Awareness, or Mobile Access. https://sc1.checkpoint.com/documents/R81/WebAdminGuides/EN/CP_R81_LoggingAndMonitoring_AdminGuide/Topics-LMG/Tracking-Options.htm
The correct answer is D. The Detailed Log and Extended Log options become available if either one of these blades is enabled in the layer: Application Control & URL Filtering, Content Awareness, or Mobile Access.
Guys this is a tricky question."Detailed Log and Extended Log are only available if one or more of these Blades are enabled on the layer: Applications and URL Filtering, Content Awareness, Mobile Access" I mean if u can enable extended log, it is enough to choose one of them.In this question, they can enable extended log. So, it isnt about blades.
D is correct
If you have a disk space issue entire log will not be visible, or checkpoint will do a log rotation. Here most viable answer will be D as content awareness should be enable to see datatype information
I would say D is correct. The question says extended log is enabled, so content awareness have to be enabled in the layer. But maybe content awareness Blade is not enabled in the gateway, being the reason for the data type info missing. Lab test.
D is correct
Answer is D https://sc1.checkpoint.com/documents/R81/WebAdminGuides/EN/CP_R81_LoggingAndMonitoring_AdminGuide/Topics-LMG/Tracking-Options.htm
Detailed Log and Extended Log are only available if one or more of these Blades are enabled on the Layer: Application & URL Filtering, Content Awareness, or Mobile Access. https://sc1.checkpoint.com/documents/R81/WebAdminGuides/EN/CP_R81_LoggingAndMonitoring_AdminGuide/Topics-LMG/Working-with-logs.htm
D. It's about content, so : PDF, Office documents,...
D is correct