NSE4 · Question #376
Which is true of FortiGate's session table?
The correct answer is B. It shows TCP connection states. The FortiGate's session table tracks detailed connection states for TCP sessions, providing visibility into the lifecycle of network flows.
Question
Which is true of FortiGate's session table?
Options
- ANAT/PAT is shown in the central NAT table, not the session table.
- BIt shows TCP connection states.
- CIt shows IP, SSL, and HTTP sessions.
- DIt does not show UDP or ICMP connection state codes, because those protocols are
How the community answered
(23 responses)- B87% (20)
- C4% (1)
- D9% (2)
Why each option
The FortiGate's session table tracks detailed connection states for TCP sessions, providing visibility into the lifecycle of network flows.
NAT/PAT information, including translated IP addresses and ports, is an integral part of each entry within the session table itself, not held in a separate central NAT table.
The FortiGate session table meticulously tracks the progression of TCP connections, displaying various states such as SYN_SENT, ESTABLISHED, and FIN_WAIT, which are fundamental for firewall inspection and ensuring proper traffic handling for connection-oriented protocols.
While the session table underlies IP sessions, SSL and HTTP are application-layer protocols; the session table primarily displays the underlying Layer 3 and Layer 4 TCP/UDP sessions that these applications utilize.
The session table does track state information for UDP and ICMP, despite their connectionless nature, by monitoring timeouts for UDP flows and matching request/reply packets for ICMP to maintain context.
Concept tested: FortiGate session table characteristics
Source: https://docs.fortinet.com/document/fortigate/7.4.0/fortios-handbook/476229/the-session-table
Topics
Community Discussion
No community discussion yet for this question.