NSE7-SSE-AR-26: Fortinet NSE 7 - FortiSASE 26 Architect

By Fortinet · Question Mode

QuestionQ46

VerifiedSD-WAN traffic control and IPsec

Refer to the exhibits.

Question Image

Question Image

An administrator is testing application steering in SD-WAN. Before creating test traffic, the administrator gathered the information displayed in the first exhibit.

After creating GoToMeeting test traffic, the administrator reviewed the related traffic log on FortiAnalyzer, shown in the second exhibit.

The administrator observed that the traffic matched the implicit SD-WAN rule, although they expected it to match rule ID 1.

Which two reasons account for some log messages indicating that the traffic matched the implicit SD-WAN rule?

Choose two
Explanation

Application-based SD-WAN matching uses an application-control cache entry keyed by the destination IP address, protocol, and port. A GoToMeeting session whose 3-tuple is not yet in that cache cannot match the application-based rule and is routed by the implicit SD-WAN rule. Layer 7 application detection can subsequently identify the application and add the 3-tuple to the cache, but it does not change the routing decision for the already established session; the learned entry is used by later new sessions. Rule ID 1 does include GoToMeeting through the Collaboration application group, and full SSL inspection is not the determining condition here.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!