FortinetFortinet
NSE4 · Question #88
NSE4 Question #88: Real Exam Question with Answer & Explanation
The correct answer is A: From top to down, according with their sequence number.. FortiGate firewall policies are processed sequentially from top to bottom based on their configured order or sequence number.
Submitted by jian89· Apr 18, 2026Firewall Policies and Authentication
Question
In which order are firewall policies processed on a FortiGate unit?
Options
- AFrom top to down, according with their sequence number.
- BFrom top to down, according with their policy ID number.
- CBased on best match.
- DBased on the priority value.
Explanation
FortiGate firewall policies are processed sequentially from top to bottom based on their configured order or sequence number.
Common mistakes.
- B. While policies have an ID, the processing order is determined by their position in the list (sequence number), not the numerical value of the policy ID itself.
- C. FortiGates do not use a "best match" algorithm like some routing protocols; they use a first-match, top-to-bottom processing order for firewall policies.
- D. FortiGate firewall policies do not have an explicit "priority value" field that determines processing order; their order is explicitly set by the administrator.
Concept tested. FortiGate firewall policy processing order
Reference. https://docs.fortinet.com/document/fortigate/7.4.0/administration-guide/209673/firewall-policies
Topics
#Firewall Policies#Policy Order#FortiGate Operation#Policy Evaluation
Community Discussion
No community discussion yet for this question.