Exam NSE5_FMG-7.2 topic 1 question 53 discussion

D is Correct. Enabling Service Access on FortiManager can include settings that allow it to act as a proxy or intermediary for FortiGuard services to managed FortiGate devices. This is particularly useful in network architectures where direct communication from FortiGate devices to FortiGuard servers is restricted or not possible.

FortiManager Study Guide for FortiManager 7.2 See Page 26

D is correct Service access allows you to enable the FortiManager response to the requests from managed devices for FortiGuard services on this interface. This includes FortiGate updates and web filtering. By default, all services to managed devices are enabled on port1 and disabled on other ports. manual page 26

The purpose of Service Access on the FortiManager interface is D. It allows FortiManager to respond to requests for FortiGuard services from FortiGate devices. When Service Access is enabled on a FortiManager interface, it allows the interface to act as a proxy or distribution point for FortiGuard services to the FortiGate devices managed by the FortiManager. This setup is particularly useful in scenarios where direct internet access from all FortiGate devices is restricted or undesirable. By configuring FortiManager to handle FortiGuard requests, administrators can centralize the update process for security services (such as antivirus updates, IPS updates, and URL filtering databases) and ensure that managed devices are consistently protected with the latest security content without needing direct internet access from each device.

D is correct. Select the Fortinet services that are allowed access on this interface. These include FortiGate Updates and Web Filtering. Service access is not enabled on any port by default. https://docs.fortinet.com/document/fortimanager/7.2.4/administration-guide/578841/configuring-network-interfaces