A.Policy service, which provides policy configuration capabilities. It mainly configures security groups and access policies between security groups. It integrates AC3.0 and AC1.0 is optional.

B.Policy enforcement points and authentication points can be deployed on different physical devices.

C.Authentication & Portal service supports serving as an AAA server to provide authentication, authorization, and accounting capabilities. It is integrated in AC3.0 and is optional in AC1.0.
Accounting relies on a third party.

D.IP-Group synchronization service, as the control plane of IP-Group, provides collection and distribution of correspondence between IP and security groups, and is integrated in AC3.0 and AC1.0

A.Smart card

B.Lossless protocol interoperability

C.Support mixed loads

D.High-density hardware

A.Through display firewall session table detail, you can see whether forward and reverse packets hit policy routing.

B.Through display firewall session table hex, you can see whether forward and reverse packets hit policy routing.

C.You can determine whether the traffic has been processed by ASPF through display firewall session table verbose.

D.The session TTL displayed through display firewall session table verbose indicates the remaining aging time of the session.

A.After the configuration is translated, it is not verified on the device and is used directly online.

B.Configuration translation relies solely on manual translation and does not use existing tools.

C.There was no communication in the early stage, and the R&D review was notified temporarily on the day of replacement.

D.If the customer's business direction and usage functions are not clear, replace them directly.

A.For UDP protocol sessions, the FW will back up after receiving the reverse message.

B.ICMP sessions are not backed up

C.For TCP protocol sessions, the session will not be backed up when the TCP three-way handshake is not completed.

D.Sessions generated by messages sent to and from the FW will not be backed up.