NSE4 · Question #134
In which order are firewall policies processed on the FortiGate unit?
The correct answer is A. They are processed from the top down according to their sequence number. FortiGate firewall policies are processed sequentially from the top to the bottom of the list, with the first matching policy being applied to the traffic.
Question
In which order are firewall policies processed on the FortiGate unit?
Options
- AThey are processed from the top down according to their sequence number.
- BThey are processed based on the policy ID number shown in the left hand column of the policy
- CThey are processed on best match.
- DThey are processed based on a priority value assigned through the priority column in the policy
How the community answered
(30 responses)- A87% (26)
- B3% (1)
- C7% (2)
- D3% (1)
Why each option
FortiGate firewall policies are processed sequentially from the top to the bottom of the list, with the first matching policy being applied to the traffic.
FortiGate units process firewall policies in a top-down manner, checking each policy in sequence until a match is found, and then applying that policy's actions.
The policy ID number is an internal identifier and does not determine the processing order; the sequence or position in the list dictates the order.
FortiGate firewalls do not use a 'best match' algorithm for firewall policy processing; they use a first-match, top-down approach.
FortiGate policies do not have an assignable priority value that dictates processing order; their physical position in the policy list is the determinant.
Concept tested: FortiGate firewall policy processing order
Source: https://docs.fortinet.com/document/fortigate/7.4.0/administration-guide/86277/firewall-policies
Topics
Community Discussion
No community discussion yet for this question.