Refer to the exhibit.
The exhibit shows a diagram of a FortiGate device connected to the network, the firewall policy and VIP configuration on the FortiGate device, and the routing table on the ISP router.
When the administrator tries to access the web server public address (203.0.113.2) from the internet, the connection times out. At the same time, the administrator runs a sniffer on FortiGate to capture incoming web traffic to the server and does not see any output.
Based on the information shown in the exhibit, what configuration change must the administrator make to fix the connectivity issue?

Question

Refer to the exhibit.The exhibit shows a diagram of a FortiGate device connected to the network, the firewall policy and VIP configuration on the FortiGate device, and the routing table on the ISP router.When the administrator tries to access the web server public address (203.0.113.2) from the internet, the connection times out. At the same time, the administrator runs a sniffer on FortiGate to capture incoming web traffic to the server and does not see any output.Based on the information shown in the exhibit, what configuration change must the administrator make to fix the connectivity issue?

Jatuchot Siriwongsilp · Accepted Answer

In the VIP configuration, enable arp-reply.

Jatuchot Siriwongsilp · Answer

Configure a loopback interface with address 203.0.113.2/32.

Jatuchot Siriwongsilp · Answer

Enable port forwarding on the server to map the external service port to the internal service port.

Jatuchot Siriwongsilp · Answer

In the firewall policy configuration, enable match-vip.

Question list

List of questions

Question 1

(0)

Question 2

(0)

Question 3

(0)

Question 4

(0)

Question 5

(0)

Question 6

(0)

Question 7

(0)

Question 8

(0)

Question 9

(0)

Question 10

(0)

Related questions

Question 134 - NSE4_FGT-7.2 discussion

Suggested answer: B

0 comments