NSE4 · Question #262
Which of the following Session TTL values will take precedence?
The correct answer is C. Session TTL dictated by the application control list associated with the matching firewall policy. The Session TTL value specified within the application control list associated with a matching firewall policy will take precedence over other Session TTL settings.
Question
Which of the following Session TTL values will take precedence?
Options
- ASession TTL specified at the system level for that port number
- BSession TTL specified in the matching firewall policy
- CSession TTL dictated by the application control list associated with the matching firewall policy
- DThe default session TTL specified at the system level
How the community answered
(54 responses)- A17% (9)
- B9% (5)
- C70% (38)
- D4% (2)
Why each option
The Session TTL value specified within the application control list associated with a matching firewall policy will take precedence over other Session TTL settings.
A system-level TTL for a specific port number is less specific than an application-level TTL.
A Session TTL specified in a general matching firewall policy is less specific than an application-level TTL defined within an associated application control list.
FortiGate applies Session TTLs in a hierarchical manner, and the most specific setting, such as a Session TTL defined for an application within an application control list tied to a matching firewall policy, will override broader system-level or policy-level settings.
The default system-level Session TTL is the least specific and will be overridden by more specific configurations.
Concept tested: FortiGate Session TTL Precedence
Source: https://docs.fortinet.com/document/fortigate/7.4.0/administration-guide/402927/session-timers
Topics
Community Discussion
No community discussion yet for this question.