Fortinet
FCSS_NST_SE-7.6 · Question #81
Refer to the exhibit. FortiGate is in conserve mode as shown in the Event logs. Based on the information shown in the exhibit, what can you conclude about the FortiGate intrusion prevention system…
The correct answer is D. New packets might pass through without inspection. The "enter fail open mode" message tells you IPS is configured to fail‑open under memory pressure, so new packets will be allowed through without full inspection when conserve mode
Troubleshoot Proxy and Flow-based Inspection Issues
Question
Refer to the exhibit. FortiGate is in conserve mode as shown in the Event logs. Based on the information shown in the exhibit, what can you conclude about the FortiGate intrusion prevention system (IPS) configuration?
Exhibit
Options
- AIPS fail open mode is disabled.
- BThe inspected protocol is not supported.
- CThe IPS profile is proxy based.
- DNew packets might pass through without inspection.
How the community answered
(27 responses)- A4% (1)
- B19% (5)
- C11% (3)
- D67% (18)
Explanation
The "enter fail open mode" message tells you IPS is configured to fail‑open under memory pressure, so new packets will be allowed through without full inspection when conserve mode
Topics
#conserve mode#IPS failopen#memory exhaustion#inspection bypass
Community Discussion
No community discussion yet for this question.