Which of the following statements correctly describes FortiGates route lookup behavior when searching for a suitable gateway? (Choose two)

FortiGate performs a route lookup on the first packet of a new session to determine the outgoing gateway, and also on packets (like 'trust reply' packets) that initiate new flows or do not match existing sessions.

Routing

Question

Options

ALookup is done on the first packet from the session originator
BLookup is done on the last packet sent from the responder
CLookup is done on every packet, regardless of direction
DLookup is done on the trust reply packet from the responder Answer: AD

Why each option

ALookup is done on the first packet from the session originator

BLookup is done on the last packet sent from the responder

Route lookups are not performed on the last packet sent from a responder; routing decisions for an established session are typically handled by the session table entry.

CLookup is done on every packet, regardless of direction

Once a session is established, all subsequent packets belonging to that session, in both directions, follow the path determined during the first packet's lookup without requiring a new route lookup for every packet.

DLookup is done on the trust reply packet from the responder Answer: AD

Concept tested: FortiGate session-based routing and lookup

Source: https://docs.fortinet.com/document/fortigate/7.4.0/handbook/199049/packet-flow

Topics

#Route lookup#Routing behavior#Session initiation

Community Discussion

No community discussion yet for this question.

Full NSE4_FGT-7.0 Practice