Which item can be selected in the firewall policy Destination field?

An administrator has configured central DNAT and virtual IPs.

Which item can be selected in the firewall policy Destination field?
A . An IP pool
B . A VIP object
C . A VIP group
D . The mapped IP address object of the VIP object

Answer: D

Explanation:

– when central NAT is enabled => put the mapped IP address of the VIP object.

– when central NAT is disabled => put the VIP object.

In the context of central DNAT and virtual IPs in FortiGate, the correct option for the firewall policy

Destination field is:

D. The mapped IP address object of the VIP object

When configuring central DNAT, you typically select the mapped IP address object associated with the VIP object in the firewall policy Destination field. This mapped IP address represents the internal destination to which traffic will be redirected.

So, the correct choice is D.