Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

CheckPoint 156-215.82 Exam - Topic 6 Question 3 Discussion

What is the difference between generating logs per connection or per session?
B) Per connection means that a log is generated for each connection in the session while per session means that only one log per session is generated.
A) Per Session is only available for URL Filtering, whereas the Connection could be applied to URL Filtering as well as Application Control.
C) Per Session means that you will get the name of application in Application Control, although the applications were not specified in the rule base. Per Connections means that you will get the whole list of content in the Content Awareness blade.
D) Per session means that a log is collected for each session in a connection while per connection means that only one log is collected per session.

CheckPoint 156-215.82 Exam - Topic 6 Question 3 Discussion

Actual exam question for CheckPoint's 156-215.82 exam
Question #: 3
Topic #: 6
[All 156-215.82 Questions]

What is the difference between generating logs per connection or per session?

Show Suggested Answer Hide Answer
Suggested Answer: B

The correct answer is B. Per connection logging generates a log entry for each connection in a session, while per session logging reduces log volume by generating one log for the overall session. This distinction matters in high-volume environments because connection-level logging can provide granular visibility but increases log volume and indexing/storage load. Session-level logging is more efficient but provides less per-connection detail. Option A is incorrect because the concept is not limited to only URL Filtering in the manner stated. Option C is unrelated and confuses application identification and Content Awareness with the log-generation mode. Option D reverses the meaning. Administrators choose tracking/log behavior based on investigation requirements, compliance needs, and performance/storage considerations. For ordinary access rules, per-session logging may be sufficient; for sensitive or heavily investigated traffic, per-connection logging may be preferable. Reference topics: Tracking Options, per-connection logging, per-session logging, SmartConsole Logs & Events.


Contribute your Thoughts:

0/2000 characters

Currently there are no comments in this discussion, be the first to comment!


Save Cancel