An administrator wants to simulate threat prevention without impacting traffic. Which profile should be used?

In Check Point R82 Autonomous Threat Prevention, the "Monitor" profile is specifically engineered for simulation, auditing, and testing purposes. When an administrator applies the Monitor profile to a network segment, the security gateway deeply inspects the network traffic and generates detailed logs for any detected malicious activity or policy violations. Crucially, it performs these actions without actively blocking, dropping, or interfering with the traffic flow. This non-intrusive behavior allows administrators to safely evaluate the real-world impact of the threat prevention mechanisms, identify potential false positives, and ensure that legitimate business traffic will not be disrupted before transitioning to active prevention profiles.

B. Internal Network: This profile actively prevents threats on internal network segments and will impact traffic by blocking detected malicious activity.
C. Guests Network: This profile is designed to actively secure guest networks and will drop malicious traffic, thereby impacting the network flow.
D. Strict Security: This profile applies the most aggressive active prevention settings available and will definitely block traffic, impacting network flows.

1. Check Point Software Technologies. (2024). Check Point R82 Threat Prevention Administration Guide. Section: Autonomous Threat Prevention -> Autonomous Threat Prevention Profiles, pp. 46-48.

2. Check Point Software Technologies. (2024). Check Point R82 Logging and Monitoring Administration Guide. Section: Threat Prevention Logs.