Refer to the exhibit.Central NAT was configured on a FortiGate firewall. A sniffer shows ICMP packets out to a host on the Internet egresses with the port1 IP address instead of the virtual IP (VIP) that was configuredReferring to the exhibit, which configuration change will ensure that ICMP traffic is also translated?A.B.C.D.
A company has just rolled out new remote sites and now you need to deploy a single firewall policy to all of these sites to allow Internet access usingFortiManager. For this particular firewall policy, the source address object is called LAN, but its value will change according to the site the policy is being installed.Which statement about creating the object LAN is correct?
Refer to the exhibit.You are working on FortiGate 61E operating in flow-based inspection mode with various settings optimized for performance. The main Internet firewall policy is using the "default" antivirus profile. You found that some executable virus samples files downloaded over HTTP are not being blocked by the FortiGate.Referring to the exhibit, how can this be fixed?
Refer to the exhibit.An organization has a FortiGate cluster that is connected to two independent ISPs. You must configure the FortiGate failover for a single ISP failure to occur without disruption.Referring to the exhibit, which two FortiGate BGP features are enabled to accomplish this task? (Choose two.)
A legacy router has been replaced by a FortiGate device. The FortiGate has inherited the management IP address of the router and now the network administrator needs to remove the router from the FortiSIEM configuration.Which two statements about this operation are true? (Choose two.)
You have configured an HA cluster with two FortiGate devices. You want to make sure that you are able to manage the individual cluster members directly using port3.Referring to the configuration shown, in which two ways can you accomplish this task? (Choose two.)
