View all questions & answers for the NSE 6 - Network Security 7.6 Support Engineer Materials exam

NSE 6 - Network Security 7.6 Support Engineer Materials - Question #27 Discussion

Comment Image Comment Image Comment Image

While troubleshooting a FortiGate web filter issue, users report that they cannot access any websites, even though those sites are not explicitly blocked by any web filter profiles that are applied to firewall policies. What are the three most likely reasons for this behavior? (Choose three answers)

  • A. The web filter cache has been cleared causing all websites to take longer to be rated.
  • B. The SSL/TLS deep inspection was configured but the browsers do not have the FortiGate certificate installed.
  • C. The webfilter-force-off setting has been enabled under config system fortiguard.
  • D. The DNS server is unreachable, preventing URL resolution.
  • E. The FortiGuard Web Filtering license has expired, causing FortiGate to apply the default block action.
Correct Answer: C,D,E

Brave-Dump Community Votes

Answer: C, D, E (3 votes) 100%

Community Explanations & Comments (3)

Brave-Dumps.com Admin 1 year ago
Selected: C, D, E
Network Security Support Engineer 7.6 Study Guide pages 257-258
Adam 9 months ago
Selected: C, D, E
It seems if "webfilter-force-off" is enabled which means web filtering is disabled globally, and we have web filter security profile in matched firewall policy, then that traffic will be blocked as per "https://community.fortinet.com/t5/FortiGate/Technical-Tip-FortiGate-blocking-traffic-after-integration-with/ta-p/191252".
Any idea why option B is wrong? users should get certificate warning if they don't trust FortiGate CA certificate used for deep inspection which seems matching expression "cannot access any websites" if we consider that users won't bypass the certificate warning.
Unathi Sinabo Mali 7 months ago
Selected: C, D, E
I would of said B,D,E however the SSL with inspection would need to be DLP which I do not believe is the case in this question