FCSS-NST-SE-7-6: Fortinet NSE 6 - Network Security 7.6 Support EngineerDemo

By Fortinet · Question Mode

QuestionQ26

System troubleshooting

Refer to the exhibit.

Partial output from the diagnose sys session stat command is displayed.

Question Image

An administrator has observed unusual behavior from FortiGate. Sessions appear to be removed randomly.

Which two reasons could account for this?

Choose two
  • A FortiGate is flushing sessions because of high memory usage.
  • B FortiGate is deleting sessions because the kernel cannot allocate more memory pages.
  • C FortiGate is not accepting sessions because the device has been down 16 out of 120 seconds.
  • D FortiGate is dropping all TCP sessions with incomplete three-way handshakes.
Explanation

A nonzero memory_tension_drop counter indicates that the kernel ran out of usable memory and deleted older sessions while scanning the session table. The ephemeral=196608/196608 value shows the ephemeral-session limit has been reached; ephemeral TCP sessions are those still in the connection-establishment phase, so FortiGate drops incomplete TCP handshakes to protect session-memory resources.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!