NSE4 · Question #377
Which of the following statements are correct concerning the FortiGate session life support protocol? (Choose two)
The correct answer is A. By default, UDP sessions are not synchronized. D. Allows per-VDOM session synchronization.. By default, FortiGate High Availability (HA) does not synchronize UDP sessions to conserve resources, but it offers flexible per-VDOM session synchronization.
Question
Which of the following statements are correct concerning the FortiGate session life support protocol? (Choose two)
Options
- ABy default, UDP sessions are not synchronized.
- BUp to four FortiGate devices in standalone mode are supported.
- Conly the master unit handles the traffic.
- DAllows per-VDOM session synchronization.
How the community answered
(18 responses)- A94% (17)
- C6% (1)
Why each option
By default, FortiGate High Availability (HA) does not synchronize UDP sessions to conserve resources, but it offers flexible per-VDOM session synchronization.
FortiGate HA, by default, does not synchronize UDP sessions between cluster members to minimize overhead and bandwidth consumption, as UDP is a connectionless protocol where session recreation is often less critical than for TCP.
FortiGate HA typically supports a maximum of two devices in a cluster (active-passive or active-active), not up to four devices in standalone mode.
In an active-active FortiGate HA cluster, both the master and slave units are capable of processing and handling network traffic, distributing the load and enhancing throughput.
FortiGate High Availability allows for granular control over session synchronization, enabling administrators to configure and manage synchronization settings independently for each Virtual Domain (VDOM) within the device.
Concept tested: FortiGate HA session synchronization features
Source: https://docs.fortinet.com/document/fortigate/7.4.0/fortios-handbook/556950/session-synchronization
Topics
Community Discussion
No community discussion yet for this question.