FCP_FMG_AD-7.6 · Question #3
Push updates are failing on a FortiGate device located behind a network address translation (NAT) device? Which two settings should the administrator check to correct this problem? (Choose two.)
The correct answer is A. Make sure the NAT device IP address and the correct ports are configured on FortiManager. C. Make sure the virtual IP address and the correct ports are configured on the NAT device. What if FortiManager is behind a NAT device? If FortiManager is behind a NAT device, sending its IP address for push updates causes push updates to fail because this is a non-routable IP address from the FDN. You must configure the • On FortiManager, configure the NAT device IP…
Question
Push updates are failing on a FortiGate device located behind a network address translation (NAT) device? Which two settings should the administrator check to correct this problem? (Choose two.)
Options
- AMake sure the NAT device IP address and the correct ports are configured on FortiManager.
- BMake sure FortiGuard updates and web service are enabled on the FortiGuard service interface.
- CMake sure the virtual IP address and the correct ports are configured on the NAT device.
- DMake sure the Bind to IP address option on the FortiGuard service interface is set to the virtual IP
How the community answered
(35 responses)- A77% (27)
- B14% (5)
- D9% (3)
Explanation
What if FortiManager is behind a NAT device? If FortiManager is behind a NAT device, sending its IP address for push updates causes push updates to fail because this is a non-routable IP address from the FDN. You must configure the • On FortiManager, configure the NAT device IP address and port used for push updates. • On the NAT device, configure the virtual IP and port that forwards to FortiManager.device.
Topics
Community Discussion
No community discussion yet for this question.