FCP-FSA-AD-5-0: Fortinet NSE 5 - FortiSandbox 5.0 Administrator

By Fortinet · Question Mode

QuestionQ8

VerifiedSystem Configuration

An organization has an existing FortiGate deployed as a data center firewall (DCFW) that sends inbound files to FortiSandbox for inline scanning. Following a network redesign, traffic between the FortiSandbox and the DCFW now traverses an intermediate firewall. Inline scanning no longer functions.

When reviewing the intermediate firewall configuration, you find that it allows traffic on TCP/3389, UDP/53, and TCP/443.

What must be changed for the integration to function?

Explanation

FortiGate inline scanning requires the FortiSandbox appliance to be reachable on TCP/4443. The intermediate firewall must permit FortiGate-to-FortiSandbox traffic on that port; TCP/443 does not provide the required inline-scanning service.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!