NSE4 · Question #454
In which order are firewall policies processed on a FortiGate unit?
The correct answer is A. From top to bottom, according with their sequence number. FortiGate firewall policies are processed sequentially from top to bottom based on their order in the policy list, with the first matching policy being applied.
Question
In which order are firewall policies processed on a FortiGate unit?
Options
- AFrom top to bottom, according with their sequence number.
- BFrom top to bottom, according with their policy ID number.
- CBased on best match.
- DBased on the priority value.
How the community answered
(27 responses)- A96% (26)
- B4% (1)
Why each option
FortiGate firewall policies are processed sequentially from top to bottom based on their order in the policy list, with the first matching policy being applied.
FortiGate firewall policies are processed in a strict top-to-bottom, sequential order based on their position or sequence number in the policy list, with the first policy that matches the traffic criteria being enforced.
While policies have unique ID numbers, their processing order is determined by their sequential position in the policy list, which can be rearranged, rather than strictly by their ID number.
FortiGate firewall policies do not use a 'best match' algorithm like routing tables; instead, they are evaluated strictly in the order they appear until a match is found.
Firewall policies on FortiGate do not have an explicit 'priority value' that dictates their processing order; their position in the policy list directly determines their evaluation priority.
Concept tested: FortiGate firewall policy processing order
Source: https://docs.fortinet.com/document/fortigate/7.4.0/administration-guide/142994/about-firewall-policies
Topics
Community Discussion
No community discussion yet for this question.