ExamGecko
Question list
Search
Search

Question 12 - NSE7_NST-7.2 discussion

Report
Export

Refer to the exhibit, which shows oneway communication of the downstream FortiGate with the upstream FortiGate within a Security Fabric.

What three actions must you take to ensure successful communication? (Choose three.)

A.
Ensure the port for Neighbor Discovery has been changed.
Answers
A.
Ensure the port for Neighbor Discovery has been changed.
B.
FortiGate must not be in NAT mode.
Answers
B.
FortiGate must not be in NAT mode.
C.
Ensure TCP port 8013 is not blocked along the way
Answers
C.
Ensure TCP port 8013 is not blocked along the way
D.
You must authorize the downstream FortiGate on the root FortiGate.
Answers
D.
You must authorize the downstream FortiGate on the root FortiGate.
E.
You must enable Security Fabric/Fortitelemetry on the receiving interface of the upstream FortiGate.
Answers
E.
You must enable Security Fabric/Fortitelemetry on the receiving interface of the upstream FortiGate.
Suggested answer: C, D, E

Explanation:

The exhibit shows a sniffer capture where TCP port 8013 is being used for communication. The communication appears one-way, indicating potential issues with the upstream FortiGate receiving the necessary packets or being able to respond.

To ensure successful communication in a Security Fabric setup:

Ensure TCP port 8013 is not blocked along the way: Verify that no firewalls or network devices between the downstream and upstream FortiGates are blocking TCP port 8013. This port is crucial for Security Fabric communication.

Authorize the downstream FortiGate on the root FortiGate: In the Security Fabric, the root FortiGate must recognize and authorize the downstream FortiGate to allow proper communication and management.

Enable Security Fabric/Fortitelemetry on the receiving interface of the upstream FortiGate: The upstream FortiGate must have the Security Fabric or Fortitelemetry enabled on the interface that receives the communication from the downstream FortiGate. This enables proper data exchange and monitoring within the Security Fabric.

Fortinet Documentation on Security Fabric Configuration

Fortinet Community Discussion on Port Requirements

asked 18/09/2024
BurtAnderson Carter
35 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first