FCP_FGT_AD-7.6 · Question #2
An administrator wanted to configure an IPS sensor to block traffic that triggers a signature set number of times during a specific time period. How can the administrator achieve the objective?
The correct answer is D. Use IPS signatures, rate-mode periodical option. You can also add rate-based signatures to block specific traffic when the threshold is exceeded. On the CLI, If you set the command rate-mode to periodical, FortiGate triggers the action when the threshold is reached during the configured Duration time period.
Question
An administrator wanted to configure an IPS sensor to block traffic that triggers a signature set number of times during a specific time period. How can the administrator achieve the objective?
Options
- AUse IPS group signatures, set rate-mode 60.
- BUse IPS packet logging option with periodical filter option.
- CUse IPS filter, rate-mode periodical option.
- DUse IPS signatures, rate-mode periodical option.
How the community answered
(59 responses)- A7% (4)
- B5% (3)
- C2% (1)
- D86% (51)
Explanation
You can also add rate-based signatures to block specific traffic when the threshold is exceeded. On the CLI, If you set the command rate-mode to periodical, FortiGate triggers the action when the threshold is reached during the configured Duration time period.
Topics
Community Discussion
No community discussion yet for this question.