NSE5-FWB-AD-8-0: Fortinet NSE 5 - FortiWeb 8.0 Administrator

By Fortinet · Question Mode

QuestionQ42

VerifiedWeb application and API security with botnet mitigation

A large enterprise already has a web infrastructure with complex routing rules and static IP-address assignments. Its network administrators cannot change the existing IP-address scheme, but they require FortiWeb to inspect and block threats such as SQL injection and cross-site scripting (XSS) without altering the client-server communication flow.

In this situation, which FortiWeb operation mode is most appropriate?

Explanation

True Transparent Proxy mode places FortiWeb inline as a Layer 2 bridge while requests remain addressed to the actual web server. It requires no changes to the existing IP-address scheme, preserves the client-server flow and original client IP, and applies security policies that can block attacks such as SQL injection and XSS.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!