An administrator is using the FortiGate built-in sniffer to capture HTTP traffic between a client and a server, however, the sniffer output shows only the packets related with TCP session setups and disconnections. Why?

An administrator is using the FortiGate built-in sniffer to capture HTTP traffic between a client and a server, however, the sniffer output shows only the packets related with TCP session setups and disconnections. Why?
A . The administrator is running the sniffer on the internal interface only.
B . The filter used in the sniffer matches the traffic only in one direction.
C . The FortiGate is doing content inspection.
D . TCP traffic is being offloaded to an NP6.

View Answer

Answer: D