Refer to the exhibit, which shows the FortiGuard Distribution Network of a FortiGate device. FortiGuard Distribution Network on FortiGate An administrator is trying to find the web filter database…

Question

Exhibit

Options

• AThe web filter database is stored locally, but the administrator must run over CLI diagnose
• BThe web filter database is stored locally on FortiGate, but it is hidden behind the GUI. It
• CThe web filter database is not hosted on FortiGate: FortiGate queries FortiGuard or
• DThe web filter database is only accessible after manual syncing with a valid FDS server using

• A
  16% (7)
• B
  2% (1)
• C
  74% (32)
• D
  7% (3)

Explanation

Unlike IPS or antivirus databases, FortiGate does not store a full web filter database locally. Instead, FortiGate queries FortiGuard (or FortiManager, if configured) dynamically to classify and filter web content in real time. Web filtering works on a cloud-based model: When a user requests a website, FortiGate queries FortiGuard servers to check its category and The response is then cached locally for faster lookups on repeated requests. No local web filter database version: Unlike IPS and antivirus, which download and store signature updates locally, web filtering relies on cloud-based queries. This is why no database version appears in the GUI. Flow mode vs Proxy mode: In proxy mode, FortiGate can cache some web filter data, improving performance. In flow mode, all queries happen dynamically, with no locally stored database.

No community discussion yet for this question.