NSE4 · Question #531
On your FortiGate 60D, you've configured firewall policies. They port forward traffic to your Linux Apache web server. Select the best way to protect your web server by using the IPS engine.
The correct answer is D. Enable IPS signatures for Linux and windows servers with FTP, HTTP, TCP, and SSL. To best protect a Linux Apache web server using the FortiGate IPS engine, one should enable IPS signatures relevant to Linux servers, web services (HTTP, SSL), general network protocols like TCP, and also consider other common services like FTP.
Question
On your FortiGate 60D, you've configured firewall policies. They port forward traffic to your Linux Apache web server. Select the best way to protect your web server by using the IPS engine.
Options
- AEnable IPS signatures for Linux servers with HTTP, TCP and SSL protocols and Apache
- BEnable IPS signatures for Linux servers with HTTP, TCP and SSL protocols and Apache
- CNone. FortiGate 60D is a desktop model, which does not support IPS.
- DEnable IPS signatures for Linux and windows servers with FTP, HTTP, TCP, and SSL
How the community answered
(20 responses)- A5% (1)
- B10% (2)
- C15% (3)
- D70% (14)
Why each option
To best protect a Linux Apache web server using the FortiGate IPS engine, one should enable IPS signatures relevant to Linux servers, web services (HTTP, SSL), general network protocols like TCP, and also consider other common services like FTP.
While this option covers relevant services, option D is broader by including FTP, providing more comprehensive protection against a wider range of potential threats to a web server environment.
While this option covers relevant services, option D is broader by including FTP, providing more comprehensive protection against a wider range of potential threats to a web server environment.
The FortiGate 60D is a desktop model that fully supports IPS as a core Unified Threat Management (UTM) feature.
Enabling IPS signatures for Linux servers, common web protocols (HTTP, SSL), general TCP, and also FTP (as web servers sometimes host FTP or are targeted with FTP-related exploits) provides comprehensive protection by addressing various potential attack vectors and services commonly found in a web server environment.
Concept tested: FortiGate IPS protection for web servers
Source: https://docs.fortinet.com/document/fortigate/7.4.0/administration-guide/526725/intrusion-prevention
Topics
Community Discussion
No community discussion yet for this question.