FCSS-NST-SE-7-6: Fortinet NSE 6 - Network Security 7.6 Support EngineerDemo

By Fortinet · Question Mode

QuestionQ2

System troubleshooting

Refer to the exhibit.

Partial output from a diagnose command

Question Image

A partial output of a diagnose command is displayed. Which two conclusions can you draw from the output in the exhibit?

Choose two
  • A FortiGate will drop the expected traffic if it does not arrive within 23 seconds.
  • B The packets that belong to this session are checked against firewall policy ID 25.
  • C The TCP session is not established.
  • D This is a pinhole session to allow traffic for a TCP protocol that dynamically assigns TCP ports.
Explanation

An expectation session is a pseudo-session created by a session helper for dynamically negotiated ports. Its expire=23 value is the remaining timeout; if no matching traffic arrives before the expectation expires, FortiGate removes it and closes the dynamic pinhole. The TCP protocol and the dynamic translated port identify this as a pinhole for a protocol that negotiates additional TCP ports. The displayed policy_id is inherited from the parent session and does not show that matching traffic is evaluated against that firewall policy.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!