Refer to the exhibit, which contains the output of a debug command. If the default settings are in place, what can you conclude about the conserve mode shown in the exhibit?
A.
FortiGate is currently allowing new sessions that require flow-based content inspection and blocking sessions that require proxy-based content inspection.
B.
FortiGate is currently allowing new sessions that require flow-based or proxy-based content inspection but is not performing inspection on those sessions.
C.
FortiGate is currently blocking all new sessions regardless of the content inspection requirements or configuration settings because of high memory use.
D.
FortiGate is currently allowing new sessions that require flow-based or proxy-based content inspection and is performing inspection on those sessions.
The av-failopen setting defines the action that is applied to any proxy-based inspected traffic, while Fortigate is in conserve mode (and as long as the memory usage does not exceed the extreme threshold).
This setting also applies to flow-based antivirus inspection.
You can configure one of three different actions:
• off: All new sessions with content scanning enabled are not passed but FortiGate processes the current active sessions.
• pass(default): All new sessions pass without inspection until FortiGate switches back to non-conserve mode.
• one-shot: Similar to pass in that traffic passes without inspection. However, it will keep bypassing the antivirus proxy even after it leaves conserve mode. Administrators must either change this setting, or restart FortiGate to restart the antivirus scanning
However, if memory usage exceeds the extreme threshold, new sessions are always dropped, regardless of the FortiGate configuration
Network Security Support Engineer 7.4 Study Guide p61
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
d9eeb6d
1 week agoRadicalcactus
1 month ago