NSE7-SSE-AR-26: Fortinet NSE 7 - FortiSASE 26 Architect

By Fortinet · Question Mode

QuestionQ36

VerifiedSD-WAN traffic control and IPsec

You want FortiGate to steer all DNS traffic—whether it passes through FortiGate or is initiated by FortiGate—according to SD-WAN rules.

Which constraint must you consider?

Explanation

FortiGate-originated DNS is local-out traffic. Local-out traffic uses the routing table by default; to have it use SD-WAN rules, System DNS must be individually configured with SD-WAN as its outgoing-interface selection method. This per-feature configuration is separate from the SD-WAN rule itself.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!