NSE4_FGT-7.0 · Question #57
NGFW mode allows policy-based configuration for most inspection rules. Which security profile's configuration does not change when you enable policy-based inspection?
The correct answer is B. Antivirus. When FortiGate operates in NGFW policy-based mode, most security profiles become integrated directly into firewall policies, but the Antivirus profile remains a separate, traditional profile.
Question
NGFW mode allows policy-based configuration for most inspection rules. Which security profile's configuration does not change when you enable policy-based inspection?
Options
- AWeb filtering
- BAntivirus
- CWeb proxy
- DApplication control
How the community answered
(19 responses)- A5% (1)
- B95% (18)
Why each option
When FortiGate operates in NGFW policy-based mode, most security profiles become integrated directly into firewall policies, but the Antivirus profile remains a separate, traditional profile.
Web filtering in NGFW policy-based mode is typically configured directly within the firewall policy, integrating its settings into the rule itself.
In NGFW policy-based mode, security features like web filtering, application control, and intrusion prevention are configured directly within the firewall policy rules, providing granular control. However, Antivirus inspection remains a traditional security profile that is applied to policies, meaning its configuration method does not change to be policy-embedded.
While web proxy can be related to web filtering, its configuration or application would also align with the policy-based inspection paradigm in NGFW mode.
Application control, a core NGFW feature, is integrated directly into policy-based firewall rules for granular application identification and enforcement.
Concept tested: FortiGate NGFW Policy-based Inspection Profiles
Source: https://docs.fortinet.com/document/fortigate/7.2.0/administration-guide/441434/ngfw-policy-based-mode
Topics
Community Discussion
No community discussion yet for this question.