An administrator needs to be able to view logs for application usage on your network. What configurations are required to ensure that FortiGate generates logs for application usage activity? (Choose…

Question

Exhibit

Options

• AEnable a web filtering profile on the firewall policy.
• BCreate an application control policy.
• CEnable logging on the firewall policy.
• DEnable an application control security profile on the firewall policy.

• A
  5% (2)
• B
  10% (4)
• C
  85% (33)

Explanation

FortiGate requires two conditions to generate logs for application usage: (1) An application control security profile must be enabled and applied to the firewall policy (Option D) - this tells FortiGate to inspect and identify application traffic. (2) Logging must be explicitly enabled on that firewall policy (Option C) - even with a security profile applied, FortiGate will not record log entries unless logging is turned on for that policy. Option A (web filtering) is for URL/web category filtering, not application usage. Option B (creating an application control policy) is incomplete - the profile must also be attached to a firewall policy and logging must be enabled for logs to be generated.

No community discussion yet for this question.