NSE5-FWB-AD-8-0: Fortinet NSE 5 - FortiWeb 8.0 AdministratorDemo

By Fortinet · Question Mode

QuestionQ16

Web application and API security with botnet mitigation

FortiWeb is blocking groups of users located behind your load balancer. The logs show the same source IP address for all users.

What action should you take to restore correct client identification?

  • A Add a bot detection rule in the protection profile.
  • B Update the signature engine.
  • C Enable caching for HTTPS traffic.
  • D Reconfigure the load balancer to insert the original client IP address in an HTTP header.
Explanation

When a load balancer applies source NAT, FortiWeb sees the load balancer’s IP address for all requests. Inserting the original client IP in an HTTP header, such as X-Forwarded-For, enables FortiWeb to derive and use the actual client IP for logging and IP-based blocking. The load balancer should be configured as a trusted source for that header.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!