NSE5-FWB-AD-8-0: Fortinet NSE 5 - FortiWeb 8.0 Administrator

By Fortinet · Question Mode

QuestionQ28

VerifiedApplication delivery and additional configuration

You host several secure web applications behind one public IP address on FortiWeb.

When a client connects to a service, FortiWeb must:

  1. Identify the appropriate SSL certificate.
  2. Decrypt the request.
  3. Route the request to the appropriate back-end server.

Match each FortiWeb function with the request-handling step that performs it.

Drag & Drop
Client sends HTTPS request with SNI field
FortiWeb chooses the correct SSL certificate
FortiWeb decrypts the HTTPS session
FortiWeb inspects host header and URL path
FortiWeb routes request to correct back-end server
Explanation

TLS connection initiation carries the SNI hostname, which lets FortiWeb select the certificate for the requested virtual host. FortiWeb must then decrypt TLS before it can inspect HTTP Host and URL fields. Those inspected fields provide the routing criteria used to direct the request to the correct back-end server.

Community Discussion

No comments yet. Be the first to start the discussion!