NSE4 · Question #135
Which of the following pieces of information can be included in the Destination Address field of a firewall policy? (Select all that apply.)
The correct answer is B. A virtual IP address. C. An actual IP address or an IP address group. D. An FQDN or Geographic value(s). The Destination Address field in a FortiGate firewall policy can include various network objects such as Virtual IP addresses, actual IP addresses or groups, and FQDNs or geographic values.
Question
Which of the following pieces of information can be included in the Destination Address field of a firewall policy? (Select all that apply.)
Options
- AAn IP address pool.
- BA virtual IP address.
- CAn actual IP address or an IP address group.
- DAn FQDN or Geographic value(s).
How the community answered
(44 responses)- A14% (6)
- B86% (38)
Why each option
The Destination Address field in a FortiGate firewall policy can include various network objects such as Virtual IP addresses, actual IP addresses or groups, and FQDNs or geographic values.
An IP address pool is typically used for Source Network Address Translation (SNAT) or sometimes for load balancing, defining the *source* IP addresses to use for outgoing connections, not as a destination address in a policy.
Virtual IP (VIP) addresses are commonly used as destination addresses in policies to direct inbound traffic to internal servers behind NAT.
The destination can be specified as a single actual IP address or a logical group of multiple IP addresses, providing flexibility and organization.
FortiGate supports using Fully Qualified Domain Names (FQDNs) for dynamic destination resolution and Geographic values for filtering traffic based on country origin or destination.
Concept tested: FortiGate firewall destination address types
Source: https://docs.fortinet.com/document/fortigate/7.4.0/administration-guide/339401/creating-ip-addresses
Topics
Community Discussion
No community discussion yet for this question.