Fortinet
NSE4_FGT-7.0 · Question #123
Refer to the exhibit to view the firewall policy. Which statement is correct if well-known viruses are not being blocked?
The correct answer is A. The firewall policy does not apply deep content inspection. Need SSL deep inspection enabled for AV, Application Control and some features of Web filter to Can't do AV inspection on encrypted traffic. So they must be unencrypted using SSL deep
Security Profiles
Question
Refer to the exhibit to view the firewall policy. Which statement is correct if well-known viruses are not being blocked?
Exhibit
Options
- AThe firewall policy does not apply deep content inspection.
- BThe firewall policy must be configured in proxy-based inspection mode.
- CThe action on the firewall policy must be set to deny.
- DWeb filter should be enabled on the firewall policy to complement the antivirus profile.
How the community answered
(24 responses)- A75% (18)
- B13% (3)
- C4% (1)
- D8% (2)
Explanation
Need SSL deep inspection enabled for AV, Application Control and some features of Web filter to Can't do AV inspection on encrypted traffic. So they must be unencrypted using SSL deep
Topics
#firewall policies#deep inspection#antivirus#security profiles
Community Discussion
No community discussion yet for this question.