NSE4 · Question #122
An administrator configures a FortiGate unit in Transparent mode on the 192.168.11.0 subnet. Automatic Discovery is enabled to detect any available FortiAnalyzers on the network. Which of the…
The correct answer is A. 192.168.11.100 B. 192.168.11.251. FortiAnalyzer automatic discovery uses broadcast or multicast messages, detecting only FortiAnalyzers within the same local subnet as the FortiGate unit.
Question
An administrator configures a FortiGate unit in Transparent mode on the 192.168.11.0 subnet. Automatic Discovery is enabled to detect any available FortiAnalyzers on the network. Which of the following FortiAnalyzers will be detected? (Select all that apply.)
Options
- A192.168.11.100
- B192.168.11.251
- C192.168.10.100
- D192.168.10.251
How the community answered
(32 responses)- A91% (29)
- C3% (1)
- D6% (2)
Why each option
FortiAnalyzer automatic discovery uses broadcast or multicast messages, detecting only FortiAnalyzers within the same local subnet as the FortiGate unit.
When automatic discovery is enabled on a FortiGate, it broadcasts discovery requests within its configured subnet to locate FortiAnalyzers, meaning 192.168.11.100 will be detected.
Similarly, FortiAnalyzers with IP addresses residing in the same 192.168.11.0 subnet, such as 192.168.11.251, will be detected by the FortiGate's broadcast-based automatic discovery.
FortiAnalyzers with IP addresses in different subnets, like 192.168.10.100, will not be detected by automatic discovery because broadcast traffic does not cross subnet boundaries.
FortiAnalyzers in a different subnet, such as 192.168.10.251, are unreachable via local subnet broadcast and therefore will not be discovered by the automatic process.
Concept tested: FortiAnalyzer auto-discovery subnet scope
Source: https://docs.fortinet.com/document/fortigate/7.4.0/administration-guide/339486/configuring-logging
Topics
Community Discussion
No community discussion yet for this question.