Refer to the exhibits. You have implemented the application sensor and the corresponding firewall policy as shown in the exhibits. Which two actions would you take to resolve the issue? (Choose two.)

Question

Exhibits

Options

• AMove up Google in the Application and Filter Overrides section to set its priority to 1.
• BSet the action for Google in the Application and Filter Overrides section to Allow.
• CAdd Google.com to the URL category in the security profile.
• DChange the Inspection mode to Flow-based.
• ESet SSL inspection to deep-content inspection.

• A
  84% (49)
• B
  9% (5)
• C
  3% (2)
• D
  3% (2)

Explanation

Move up Google in the Application and Filter Overrides section to set its priority to 1. The “Excessive-Bandwidth” filter has a higher priority (1) and is configured to Block. Because Google applications generate significant bandwidth, they match this rule first and get blocked. Moving the “Google” filter to priority 1 ensures that the monitor action for Google is applied before Set SSL inspection to deep-content inspection. Google applications use HTTPS encryption, so the FortiGate cannot identify or control them unless SSL traffic is decrypted. Changing from certificate-inspection (which only inspects certificates) to deep-inspection allows FortiGate to fully analyze encrypted application traffic and properly apply the Application Control rules.

No community discussion yet for this question.