Checkpoint fw question

[charleskoh04]

Hi

Just like to ask, in checkpoint fw, when packets reaches the fw , which will do the checking first ? The Security policy or the Address translation ?

Lets say,

1) I create a address translation rule for the particular object but did not create in the security rule, will the packets be dropped ?

Thanks

 

[n0cmonkey]

I think the packets would be dropped. Not positive though, I generally create the policy and objects early on.