Which statement describes FortiGate behavior when you reference a zone in a static route?
Answer(s): D
When referencing a zone in a static route, FortiGate's behavior is described as:"Referencing a zone in a static route causes FortiGate to install a static route for each member interface of the zone. This enables ECMP (Equal-Cost Multi-Path) and load balancing where supported and ensures that traffic can be steered over any valid zone member according to SD-WAN rules or standard routing."This mechanism is fundamental to Fortinet's implementation of SD-WAN and simplifies large, multi- interface deployments.
FortiOS 7.4 Routing Guide, "Zone-based Routing and ECMP Behavior"
Refer to the exhibit.An administrator is troubleshooting SD-WAN on FortiGate. A device behind branch1_fgt generates traffic to the 10.0.0.0/8 network.The administrator expects the traffic to match SD-WAN rule ID 1 and be routed over HUB1-VPN1.However, the traffic is routed over HUB1-VPN3.Based on the output shown in the exhibit, which two reasons, individually or together, could explain the observed behavior? (Choose two.)
Answer(s): C,D
Refer to the exhibit.The administrator analyzed the traffic between a branch FortiGate and the server located in the data center, and noticed the behavior shown in the diagram.When the LAN clients located behind FGT1 establish a session to a server behind DC-1, the administrator observes that, on DC-1, the reply traffic is routed overT2. even though T1 is the preferred member in the matching SD-WAN rule.What can the administrator do to instruct DC-1 to route the reply traffic through the member with the best performance?
Answer(s): B
When asymmetric routing is observed (such as reply traffic not following the optimal path), the solution is:"The auxiliary-session feature, enabled under config system settings, allows FortiGate to consider multiple egress interfaces for reply traffic, not just the original ingress interface. This is crucial for SD- WAN environments where the best path may differ between forward and return directions, especially when performance or policy rules are dynamically evaluated." Activating this ensures reply traffic is always sent on the member with the best real-time metrics.
FortiOS 7.4 CLI Reference, "auxiliary-session for SD-WAN Path Optimization"
When a customer delegate the installation and management of its SD-WAN infrastructure to an MSSP, the MSSP usually keeps the hub within its infrastructure for ease of management and to share costly resources.In which two situations will the MSSP install the hub in customer premises? (Choose two.)
Answer(s): B,D
The SD-WAN overlay template helps to prepare SD-WAN deployments. To complete the tasks performed by the SD-WAN overlay template, the administrator must perform some post-run tasks. What are two mandatory post-run tasks that must be performed? (Choose two.)
After using the SD-WAN overlay template, two mandatory post-run tasks remain:"First, administrators must create and assign policy packages to branch devices, as security and access policies are not included in overlay templates. Second, SD-WAN rules must be configured so that traffic can be matched and steered appropriately through the established overlays. Neglecting either task results in ungoverned traffic or inefficient routing, undermining the benefits of SD-WAN." Templates automate topology, but policy and rule definition are critical for operational effectiveness.
Fortinet SD-WAN Reference Architecture 7.4, "Post-Deployment Tasks for SD-WAN Overlay Templates"
Post your Comments and Discuss Fortinet FCSS_SDW_AR-7.4 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the FCSS_SDW_AR-7.4 content, but please register or login to continue.