NSE7-NST-7-2: Fortinet NSE 7 - Network Security 7.2 Support EngineerDemo

By Fortinet · Question Mode

QuestionQ21

Network Security Support Engineer

Refer to the exhibit, which illustrates one-way communication from the downstream FortiGate to the upstream FortiGate in a Security Fabric.

Question Image

Which three actions must you perform to ensure successful communication?

Choose three
  • A Ensure the port for Neighbor Discovery has been changed.
  • B FortiGate must not be in NAT mode.
  • C Ensure TCP port 8013 is not blocked along the way.
  • D You must authorize the downstream FortiGate on the root FortiGate.
  • E You must enable Security Fabric/Fortitelemetry on the receiving interface of the upstream FortiGate.
Explanation

Security Fabric communication to the upstream FortiGate uses TCP port 8013 by default, so that port must not be blocked. The upstream interface connected to the downstream FortiGate must have Security Fabric Connection (FortiTelemetry) enabled, and the root FortiGate must authorize the downstream FortiGate before it can join the fabric. Security Fabric FortiGates must operate in NAT mode.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!