Refer to the exhibits.
Exhibit A -
Exhibit B -
Exhibit A shows a policy package definition. Exhibit B shows the install log that the administrator received when he tried to install the policy package on FortiGate devices.
Based on the output shown in the exhibits, what can the administrator do to solve the issue?
The issue described in the install log indicates that there is a validation error associated with the dynamic interface 'LAN' mapping, which is undefined for the device branch2_fgt. This means the dynamic mappings are not properly configured for the 'LAN' interface for that particular device. To solve this issue, the administrator should create dynamic mapping for the LAN interface for all devices in the installation target list. This ensures that the policy can be applied correctly across all devices, addressing the mapping problem identified in the install log.
A is correct D is wrong, metadata variables can be used in firewall objects, but not instead of dynamic normalized interfaces in policies
Dynamic, or normalized interfaces should be used, so the Fortimanager can easily apply policies to policy packages shared between mulitple different devices managed by Fortimanager. A is correct. This is also detailed on page 55 in the SD-WAN 7.2 study guide.
Metavariable are preferably used.
No they are not preferably used for policies. Use Policy packes, and configure normalized interfaces. Meta variables are best for provisioning of the device settings - Routing, IPsec, ADVPN, SD-WAN, system settings and that kind of stuff. Also, meta variables are great for dynamic assignment of address object configurations with regards to IP-assignment.