Which three criteria can FortiGate use to look for a matching firewall policy to process traffic? (Choose three.)

Which three criteria can FortiGate use to look for a matching firewall policy to process traffic? (Choose three.)

A. Services defined in the firewall policy

B. Highest to lowest priority defined in the firewall policy

C. Destination defined as Internet Services in the firewall policy

D. Lowest to highest policy ID number

E. Source defined as Internet Services in the firewall policy

View Answer

Answer: A,C,E

Explanation:

A. Services defined in the firewall policy

C. Destination defined as Internet Services in the firewall policy

E. Source defined as Internet Services in the firewall policy

When a packet arrives, how does FortiGate find a matching policy? Each policy has match criteria, which you can define using the following objects:

• Incoming Interface.

• Outgoing Interface.

• Source: IP address, user, internet services.

• Destination: IP address or internet services.

• Service: IP protocol and port number.

• Schedule: Specific times to apply policy.