nse7_sdw-70 Exam - Question 13

Question

Refer to the exhibit. Based on the exhibit, which two actions does FortiGate perform on sessions after a firewall policy change? (Choose two. ).

Examice · Accepted Answer

When the 'firewall-session-dirty' is set to 'check-new', FortiGate does not apply the changes to existing sessions. This means that FortiGate does not terminate or flush existing sessions. Instead, it only evaluates and applies the new firewall policies to subsequent sessions that are created after the change. Therefore, the correct actions are that FortiGate does not change existing sessions and evaluates new sessions.

themageofsec · Answer

C, D are correct.
Study Guide 7.0 page 135.
Study Guide 7.2 page 161.

Tcmh · Answer

key word , new session

charruco · Answer

C, D are correct.

Michael348 · Answer

Answer C, D
FortiGate not to flag existing impacted session as dirty by setting firewall-session-dirty to check new. 
The results is that FortiGate evaluates only new session against the new firewall policy.

cstevens97 · Answer

Answer is C and D

JABarracus · Answer

Study Guide page 135.
Fortigate evaluates only new sessions against the new firewall policy configuration and not to flag existing sessions

belamin · Answer

C D correct

alejandrofern43 · Answer

C AND C ARE CORRECT
PAG 161 GUIDE 7.2
C. FortiGate does not change existing sessions.
D. FortiGate evaluates new sessions.

nse7_sdw-70 Exam - Question 13

Discussion