QuestionQ49

Central management

A FortiGate device that uses unified threat management (UTM) profiles is approaching resource limits, and traffic on your enterprise network is expected to grow.

You have received an additional FortiGate of the same model.

Which two options should you consider to integrate the additional FortiGate into your enterprise network?

Choose two
  • A FortiGate Clustering Protocol (FGCP) in active-active (A-A) mode with switches
  • B FortiGate Clustering Protocol (FGCP) in active-passive (A-P) mode with VDOM disabled
  • C FortiGate Session Life Support Protocol (FGSP) with external load balancers
  • D Virtual Router Redundancy Protocol (VRRP) with switches
Explanation

FGCP active-active mode balances proxy-based security-profile processing across cluster members, increasing throughput for resource-intensive UTM inspection. FGSP is designed for deployments with external load balancers: the load balancers distribute traffic across FortiGate peers while FGSP synchronizes sessions to support failover. Active-passive FGCP and VRRP primarily provide redundancy rather than adding active UTM-processing capacity.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!