NSE5_FMG-7.0 · Question #80
An administrator is tasked with troubleshooting an issue with push updates failing on a FortiManager device that is located behind a NAT device. Which two settings should the administrator check?…
The correct answer is A. That the virtual IP address and correct ports are set on the NAT device B. That the NAT device IP address and correct ports are configured on FortiManager. If FortiManager is behind a NAT device, sending its IP address for push updates causes push updates to fail because this is a non-routable IP address from the FDN. You must configure the - On FortiManager, configure the NAT device IP address and port used for push updates. By…
Question
An administrator is tasked with troubleshooting an issue with push updates failing on a FortiManager device that is located behind a NAT device. Which two settings should the administrator check? (Choose two.)
Options
- AThat the virtual IP address and correct ports are set on the NAT device
- BThat the NAT device IP address and correct ports are configured on FortiManager
- CThat the external IP address on the NAT device is set to DHCP and configured with the virtual IP
- DThat the override server IP address is set on FortiManager and the NAT device
How the community answered
(27 responses)- A70% (19)
- C11% (3)
- D19% (5)
Explanation
If FortiManager is behind a NAT device, sending its IP address for push updates causes push updates to fail because this is a non-routable IP address from the FDN. You must configure the - On FortiManager, configure the NAT device IP address and port used for push updates. By default, the port for push updates is UDP 9443, but you can configure a different port number. - On the NAT device, configure the virtual IP and port that forwards to FortiManager. FortiManager may not receive push updates if the external IP address of the NAT device Exam Questions, Study Guides, Practice Tests. Lead the way to help you pass any IT Certification exams, 100% Pass Guaranteed or Full Refund. Especially Cisco, HP, Oracle, VMware, Juniper, Check Point, LPI, Nortel, EXIN and so on. Our Slogan: First Test, First Pass. Help you to pass any IT Certification exams at the first try. You can reach us at any of the email addresses listed below. Any problems about IT certification or our products, you could rely upon us, we will give you satisfactory answers in 24 hours.
Topics
Community Discussion
No community discussion yet for this question.