Refer to the exhibits, which show the configuration on FortiGate and partial internet session information from a user on the internal network.
An administrator would like to test session failover between the two service provider connections.
What changes must the administrator make to force this existing session to immediately start using the other interface? (Choose two.)
To force the existing session to immediately start using the other interface, the administrator needs to enable the 'snat-route-change' setting and change the priority of the static routes. Enabling 'snat-route-change' ensures that routing information is flushed from existing SNAT sessions after a routing change, enabling these sessions to use the new best route. Additionally, changing the priority of the port1 static route to a higher value will force the failover by making port2 the preferred route. Therefore, the correct options are to configure 'set snat-route-change enable' and to change the priority of the port1 static route to 11.
It's A & C. B would just create an equal cost solution and not a failover scenario.
A, C: snat-route-changed needs to be changed to enabled (default: disabled) to make this test, and then change the priority to force traffic to go through port2. B: nope, both ports would have the same priority. D: default is disabled, and we need to enable it. Ref: Enterprise_Firewall_7.0_Study_Guide-Online 147
A and C
A - to change the route when failover happens C - to force the failover
A & C for answer , snat-route for force existing traffic (may_dirty flag)
vote A & C
vote A & C
A - When 'snat-route-change' is enabled, after a routing change, routing information is flushed from existing SNAT sessions; so, the existing SNAT sessions can use the new best route C - same distance, different priority : The routing table contains the two static routes but only the one with the lowest priority is used for routing traffic.
I agree with answer A and B, the question is asking for the straight solution; I read it as either or instead of step 1 step 2, I wonder which one is the correct answer. Depending on how we read it can be A and B or A and C.
Enterprise_Firewall_7.0_Study_Guide-Online.pdf p 148-149
A and C
Correct answer: A C
vote A & C
A and C
A and C
A and C
A and C