View all questions & answers for the NSE 4 - FortiOS 7.6 Administrator Exam Materials exam
NSE 4 - FortiOS 7.6 Administrator Exam Materials - Question #85 Discussion
Community Explanations & Comments (5)
Nick
1 year ago
Selected: A
Sorry, I have done further research ... A is correct. Only HTTP and HTTPS traffic will go to FortiSASE
Nick
1 year ago
Selected: A
Please change answer back to A.
"All other non-web traffic bypasses FortiSASE and is forwarded to the internet directly."
https://docs.fortinet.com/document/fortisase/latest/architecture-guide/834810/sia-for-agentless-remote-users
"All other non-web traffic bypasses FortiSASE and is forwarded to the internet directly."
https://docs.fortinet.com/document/fortisase/latest/architecture-guide/834810/sia-for-agentless-remote-users
Vic Geek
10 months ago
Selected: A
7.6 Study Guide Page 549
"SWG deployment secures only web traffic protocols, such as HTTP and HTTPS. The web browser redirects HTTP and HTTPS traffic to FortiSASE, which secures user web traffic by implementing SWG security policies. The SWG component on FortiSASE offers a full security stack with antivirus, web filtering, application control, and so on.
All other nonweb traffic bypasses FortiSASE and is forwarded directly to the internet."
"SWG deployment secures only web traffic protocols, such as HTTP and HTTPS. The web browser redirects HTTP and HTTPS traffic to FortiSASE, which secures user web traffic by implementing SWG security policies. The SWG component on FortiSASE offers a full security stack with antivirus, web filtering, application control, and so on.
All other nonweb traffic bypasses FortiSASE and is forwarded directly to the internet."
Ahmed El Hasseen El Tom El Shaikh Berair
3 months ago
Selected: A
85
Fadil Bushra
1 month ago
Selected: A
The correct answer is A. All the nonweb traffic will bypass FortiSASE.
An agentless, secure web gateway (SWG) deployment relies on explicit proxy configurations (such as a PAC file or manual browser settings) on the endpoint.
• Web Traffic (HTTP/HTTPS): The browser or operating system detects the proxy settings and forwards this specific web traffic to FortiSASE for inspection.
• Nonweb Traffic: Because there is no FortiClient agent installed to intercept traffic at the system level (network driver layer), nonweb traffic—such as SSH, FTP, ICMP, or custom enterprise applications—is not captured by the proxy settings. Therefore, all nonweb traffic bypasses FortiSASE completely and goes directly out through the endpoint's local internet gateway.
An agentless, secure web gateway (SWG) deployment relies on explicit proxy configurations (such as a PAC file or manual browser settings) on the endpoint.
• Web Traffic (HTTP/HTTPS): The browser or operating system detects the proxy settings and forwards this specific web traffic to FortiSASE for inspection.
• Nonweb Traffic: Because there is no FortiClient agent installed to intercept traffic at the system level (network driver layer), nonweb traffic—such as SSH, FTP, ICMP, or custom enterprise applications—is not captured by the proxy settings. Therefore, all nonweb traffic bypasses FortiSASE completely and goes directly out through the endpoint's local internet gateway.
You are onboarding an agentless, secure web gateway (SWG) endpoint for secure internet access (SIA). What will happen to the user's nonweb traffic? (Choose one answer)
Brave-Dump Community Votes