View all questions & answers for the NSE 6 - Network Security 7.6 Support Engineer Materials exam


NSE 6 - Network Security 7.6 Support Engineer Materials-Question 28 Discussion
Comment Image Comment Image Comment Image

An administrator has configured a firewall policy to use proxy-based inspection mode. What could explain the messages observed in the debug flow output? (Choose one answer)

  • A. At least one protocol port under Protocol Options has been mapped to Any.
  • B. SSL deep inspection is not configured.
  • C. The FTP protocol has not yet been mapped to port 211 under Protocol Options.
  • D. FortiGate does not have enough free memory to perform proxy-based inspections.
Correct Answer: C

Brave-Dump Clients Votes

C 66.67%
A 33.33%

Comments



Brave-Dumps.com Admin 2025-10-24 15:58:16

Selected Answers: C


From the debug output that FortiGate triggered the FTP helper instead of using the proxy, which happens when the protocol isn’t mapped to the correct port (211) under Protocol Options, confirming that the FTP protocol hasn’t been mapped to port 211.

What do you think?

Anonymous User 2026-04-05 18:40:51

Selected Answers: C


Network_Security_Support_Engineer_7.6_Study_Guide Page 118

Anonymous User 2026-06-18 17:45:57

Selected Answers: A


Study guide page 274:

When a policy is set to proxy-based inspection, the settings in Protocol Options instruct the FortiGate to direct specified destination ports to their respective proxy process, except when ANY is set for an enabled protocol.

In this scenario, the FortiGate must send the traffic to the IPS engine to be processed by the CPU, in order to identify the protocol before directing it to the proxy process.