NSE7_ZTA-7.2: Fortinet NSE 7 - Zero Trust Access 7.2

To trigger layer 2 polling on FortiNAC, the three methods are:

A) Polling scripts: These are scripts configured within FortiNAC to actively poll the network at layer 2 to gather information about connected devices.

C) Manual polling: This involves manually initiating a polling process from the FortiNAC interface to gather current network information.

D) Scheduled tasks: Polling can be scheduled as regular tasks within FortiNAC, allowing for automated, periodic collection of network data.

The other options are not standard methods for layer 2 polling in FortiNAC:

B) Link traps: These are more related to SNMP trap messages rather than layer 2 polling.

E) Polling using API: While APIs are used for various integrations, they are not typically used for initiating layer 2 polling in FortiNAC.

FortiNAC Layer 2 Polling Documentation.

Configuring Polling Methods in FortiNAC.

FortiAnalyzer playbooks are automated workflows that can perform actions based on triggers, conditions, and outputs. One of the actions that a playbook can perform is to quarantine a device by sending an API call to FortiClient EMS, which then instructs the FortiClient agent on the device to disconnect from the network. This can help isolate and contain a compromised or non-compliant device from spreading malware or violating policies.Reference:=

Quarantine a device from FortiAnalyzer playbooks

Playbooks

NGFW stands for Next-Generation Firewall, which is a network security device that provides advanced features beyond the traditional firewall, such as application awareness, identity awareness, threat prevention, and integration with other security tools. ZTA stands for Zero Trust Architecture, which is a security model that requires strict verification of the identity and context of every request before granting access to network resources. ZTA assumes that no device or user can be trusted by default, even if they are connected to a corporate network or have been previously verified.

In a ZTA deployment, NGFW can perform two functions:

Acts as segmentation gateway: NGFW can act as a segmentation gateway, which is a device that separates different segments of the network based on security policies and rules. Segmentation can help isolate and protect sensitive data and applications from unauthorized or malicious access, as well as reduce the attack surface and contain the impact of a breach. NGFW can enforce granular segmentation policies based on the identity and context of the devices and users, as well as the applications and services they are accessing. NGFW can also integrate with other segmentation tools, such as software-defined networking (SDN) and microsegmentation, to provide a consistent and dynamic segmentation across the network.

Device discovery and profiling: NGFW can also perform device discovery and profiling, which are processes that identify and classify the devices that are connected to the network, as well as their attributes and behaviors. Device discovery and profiling can help NGFW to apply the appropriate security policies and rules based on the device type, role, location, health, and activity. Device discovery and profiling can also help NGFW to detect and respond to anomalous or malicious devices that may pose a threat to the network.

: What is a Next-Generation Firewall (NGFW)? | Fortinet : What is Zero Trust Network Access (ZTNA)? | Fortinet :Zero Trust Architecture Explained: A Step-by-Step Approach:The Most Common NGFW Deployment Scenarios:Sample Configuration for Post vWAN Deployment