In a Fortinet Security Fabric, what can make an upstream FortiGate create traffic logs associated with sessions initiated on downstream FortiGate devices?

In a Fortinet Security Fabric, what can make an upstream FortiGate create traffic logs associated with sessions initiated on downstream FortiGate devices?
A . The traffic destination is another FortiGate in the fabric.
B . The upstream FortiGate is configured to do NAT
C . Log redundancy is configured in the fabric.
D . The downstream device cannot connect to FortiAnalyzer.

View Answer

Answer: B

Explanation:

When the upstream FortiGate is performing Network Address Translation (NAT), it creates new session entries for traffic passing through it. As a result, it generates its own traffic logs for those sessions, even if the sessions were initiated on a downstream FortiGate. This is because the upstream FortiGate is altering the source IP address, making it responsible for tracking the session details.