By default, FortiGate is configured to use HTTPS when performing live web filtering with FortiGuard servers. Which CLI command will cause FortiGate to use an unreliable protocol to communicate with FortiGuard servers for live web filtering?
A. set fortiguard-anycast disable
FortiGate Security 7.2 Study Guide (p.288):
"By default, FortiGate is configured to enforce the use of HTTPS port 443 to perform live filtering with FortiGuard or FortiManager. Other ports and protocols are available by disabling the FortiGuard anycast setting on the CLI."
Reference and download study guide:
https://ebin.pub/fortinet-fortigate-security-study-guide-for-fortios-72.html
The question is only asking for a single answer, TCP to is a reliable transport protocol so whom ever is choosing this needs to think about a career change.
The trick is when mentioned in these page "other ports and protocols are available by diasabling the fortiguard anycast setting on the cli" These refeer diferent to HTTPS port 443, because this is by default
By default, "fortiguard-anycast" is enabled, and this setting only works with "set protocol https".
To use udp (ie. "set protocol udp"), "fortiguard-anycast" must be disabled.
"By default, FortiGate is configured to enforce the use of HTTPS port 443 to perform live filtering with FortiGuard or FortiManager. Other ports and protocols are available by disabling the FortiGuard anycast setting on the CLI."
Fortigate Security Study Guide v7.0, Page 417
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
JustDownload
Highly Voted 1 year, 4 months agobreakanimal
Highly Voted 1 year, 4 months agoRian
Most Recent 3 months, 2 weeks agoraydel92
4 months, 1 week agojarz
6 months, 3 weeks agojoeytrib
7 months, 3 weeks agohamidreza0010
10 months, 3 weeks agoFabio6699
1 year agodrumigue
1 year, 1 month agoSisCCA
1 year, 1 month agogiulianorco
1 year, 1 month agogg25gg
1 year, 1 month agofortinc
1 year, 2 months agoBUZOMD
10 months, 1 week agoYuito
1 year, 3 months agoKutchek
1 year, 3 months agonomeursy
1 year, 3 months agoFebrian
1 year, 4 months ago