156-585 Exam QuestionsBrowse all questions from this exam

156-585 Exam - Question 32


You have configured IPS Bypass Under Load function with additional kernel parameters: ids_tolerance_no_stress=15 and ids_tolerance_stress=15. For configuration you used the “fw ctl set” command. After reboot you noticed that these parameters returned to their default values. What do you need to do to make this configuration work immediately and stay permanent?

Show Answer
Correct Answer: A

To make the configuration work immediately and persist through reboots, you need to set the parameters using the “fw ctl set” command, which updates the values immediately. Additionally, you must edit the appropriate parameters in $FWDIR/boot/modules/fwkern.conf to ensure that these settings are applied automatically at boot time. This way, the configuration remains effective after a system restart.

Discussion

3 comments
Sign in to comment
castieltelOption: A
Dec 29, 2022

Absolutely correct. A is the answer: To set the desired value for this kernel parameter permanently: For Gaia / SecurePlatform OS: [Expert@HostName]# touch $FWDIR/boot/modules/fwkern.conf https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk62848

SamoojOption: A
Feb 7, 2023

The correct answer A, for it to survive reboot

muchaOption: A
Apr 29, 2024

"A" is correct only if " fw ctl set -f" "-f" flag would be used. Otherwise answer 'D' is correct