Valid FCSS_NST_SE-7.4 Dumps shared by ExamDiscuss.com for Helping Passing FCSS_NST_SE-7.4 Exam! ExamDiscuss.com now offer the newest FCSS_NST_SE-7.4 exam dumps, the ExamDiscuss.com FCSS_NST_SE-7.4 exam questions have been updated and answers have been corrected get the newest ExamDiscuss.com FCSS_NST_SE-7.4 dumps with Test Engine here:
Refer to the exhibit, which a network topology and a partial routing table. FortiGate has already been configured with a firewall policy that allows all ICMP traffic to flow from port1 to port3. Which changes must the administrator perform to ensure the server at 10.4.0.1/24 receives the echo reply from the laptop at 10.1.0.1/24?
Correct Answer: C
Because FortiGuard is a stateful firewall it still needs an explicit policy to allow the return ICMP replies, even though the session was initiated from port1. By adding a firewall policy permitting ICMP from port3 back to port1, the echoreplies arriving on port3 will be forwarded to the laptop on port1. Without this reverse policy, the server's replies would be dropped at the FortiGate. This ensures bidirectional ICMP flow between 10.1.0.1 and 10.4.0.1.