If Internet Service is already selected as Destination in a firewall policy, which other configuration object can be selected for the Destination field of a firewall policy?
B. No other object can be added
FortiGate Security 7.2 Study Guide (p.59):
"When configuring your firewall policy, you can use Internet Service as the destination in a firewall policy, which contains all the IP addresses, ports, and protocols used by that service. For the same reason, you cannot mix regular address objects with ISDB objects, and you cannot select services on a firewall policy. The ISDB objects already have services information, which is hardcoded."
D. User or User Group (incorrect because you can not use Users or Groups as Destination, just as Source and they actually can be mixed with ISDB objects)
Reference and download study guide:
https://ebin.pub/fortinet-fortigate-security-study-guide-for-fortios-72.html
Should be D. I tried it on firewall. When you already selected internet service, it will not accept other objects except of user or user group or another Internet service
If Internet Service is selected as Destination
- You cannot use Address in the Destination
- You cannot select Service in the Firewall Policy
Fortigate Security Study Guide v7.2, page 59
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
NiciExam
Highly Voted 1 year, 9 months agoraydel92
Highly Voted 1 year, 7 months agoGeniusA
Most Recent 1 year, 4 months agodmvpn
1 year, 7 months agodmvpn
1 year, 7 months agoHalmonte0780
1 year, 9 months agoccnax2
1 year, 9 months agoccnax2
1 year, 9 months agoTakumi
1 year, 9 months ago