A FortiGate is configured to receive push updates from the FortiGuard Distribution Network, however, updates are not being received. Which are two reasons for this problem? (Choose two.)

Being connected to multiple ISPs (e.g., in a redundant setup) does not inherently prevent FortiGuard push updates, provided the routing is configured correctly to reach the FDN and the IPsec tunnel can establish over an active path.

FortiGuard push updates use IPsec VPN tunnels, which can be disrupted or prevented from establishing if a NAT device is present between the FortiGate and the FortiGuard Distribution Network, as NAT can interfere with IPsec's negotiation.

A FortiGate operating in Transparent mode can still receive FortiGuard updates, as its management functions, including FortiGuard communication, are handled by its management IP address and relevant routing.

If the external interface obtains its IP address via DHCP and this IP address changes, the IPsec tunnel used for push updates will break, requiring the FortiGate's external interface to have a static, publicly routable IP for reliable updates.