NSE4_FGT-7.0 · Question #11
An administrator has configured outgoing Interface any in a firewall policy. Which statement is true about the policy list view?
The correct answer is D. Interface Pair view will be disabled. When an administrator configures 'outgoing Interface any' in a firewall policy, the FortiGate GUI's 'Interface Pair View' becomes unavailable.
Question
An administrator has configured outgoing Interface any in a firewall policy. Which statement is true about the policy list view?
Options
- APolicy lookup will be disabled.
- BBy Sequence view will be disabled.
- CSearch option will be disabled
- DInterface Pair view will be disabled.
How the community answered
(48 responses)- A2% (1)
- B6% (3)
- C4% (2)
- D88% (42)
Why each option
When an administrator configures 'outgoing Interface any' in a firewall policy, the FortiGate GUI's 'Interface Pair View' becomes unavailable.
Configuring 'outgoing Interface any' does not disable policy lookup; policies are still evaluated in the configured order.
The 'By Sequence View' displays policies based on their order of evaluation and is not affected by the use of 'any' for an interface.
The search option for policies remains functional regardless of the interface configuration.
The 'Interface Pair View' in FortiGate's policy list organizes policies based on specific incoming and outgoing interface pairs. When 'any' is used for the outgoing interface, this explicit pairing cannot be determined, rendering the 'Interface Pair View' unusable.
Concept tested: FortiGate firewall policy list views
Source: https://docs.fortinet.com/document/fortigate/7.4.0/fortios-handbook/627629/policy-list-view
Topics
Community Discussion
No community discussion yet for this question.