NSE4 · Question #272
An administrator wishes to generate a report showing Top Traffic by service type, but wants to exclude SMTP traffic from the report. Which of the following statements best describes how to do this?
The correct answer is A. In the Service field of the Data Filter, type 25/smtp and select the NOT checkbox. To exclude SMTP traffic from a FortiGate/FortiAnalyzer report, you should specify '25/smtp' in the Service field of the Data Filter and enable the 'NOT' checkbox.
Question
An administrator wishes to generate a report showing Top Traffic by service type, but wants to exclude SMTP traffic from the report. Which of the following statements best describes how to do this?
Options
- AIn the Service field of the Data Filter, type 25/smtp and select the NOT checkbox.
- BAdd the following entry to the Generic Field section of the Data Filter: service="!smtp".
- CWhen editing the chart, uncheck mlog to indicate that Mail Filtering data is being excluded when
- DWhen editing the chart, enter 'dns' in the Exclude Service field.
How the community answered
(60 responses)- A70% (42)
- B17% (10)
- C10% (6)
- D3% (2)
Why each option
To exclude SMTP traffic from a FortiGate/FortiAnalyzer report, you should specify '25/smtp' in the Service field of the Data Filter and enable the 'NOT' checkbox.
In FortiGate or FortiAnalyzer reporting, the Data Filter allows specifying a service by its port number (25) or name (smtp). By entering '25/smtp' in the Service field and then selecting the 'NOT' checkbox, the report will effectively exclude all traffic identified as SMTP, fulfilling the requirement.
The syntax `service="!smtp"` is not the correct or standard method for excluding services within the Data Filter's Generic Field section for report generation.
Unchecking 'mlog' is not a standard or direct method to exclude SMTP traffic from a Top Traffic by service type report; 'mlog' relates more to specific mail-related log types, not general service exclusion.
There is no 'Exclude Service' field where you simply type a service name when editing a chart; exclusion is typically managed through specific filter conditions like the 'NOT' checkbox on the service field.
Concept tested: FortiAnalyzer/FortiGate report data filtering
Source: https://docs.fortinet.com/document/fortianalyzer/7.2.3/administration-guide/603070/data-filters
Topics
Community Discussion
No community discussion yet for this question.