NSE5-FWB-AD-8-0: Fortinet NSE 5 - FortiWeb 8.0 Administrator

By Fortinet · Question Mode

QuestionQ6

VerifiedDeployment and configuration

Refer to the exhibit.

Question Image

You are a FortiWeb administrator. FortiWeb is deployed between a FortiGate and two back-end web servers, as illustrated in the diagram. No server policies are presently configured on FortiWeb.

During testing, you find that a student system on the 100.64.0.0/24 network can still access the back-end servers in 10.1.1.0/24, although FortiWeb neither logs nor inspects that traffic.

Which action should you take to ensure that FortiWeb blocks or inspects all traffic before it reaches the back-end servers?

Explanation

When ip-forward is enabled, FortiWeb can act as a router and forward traffic addressed directly to a back-end server, without applying a server policy. Disabling ip-forward prevents that unmatched routing path, so traffic cannot pass through uninspected; traffic that is allowed to reach the servers must be processed through the configured FortiWeb protection path.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!