Refer to the exhibit, which shows a FortiGate configuration.
An administrator is troubleshooting a web filter issue on FortiGate. The administrator has configured a web filter profile and applied it to a policy; however, the web filter is not inspecting any traffic that is passing through the policy.
What must the administrator do to fix the issue?
The web filter is not inspecting any traffic because the 'webfilter-force-off' setting is currently enabled. This setting essentially disables the FortiGuard web filtering service. To ensure the web filter inspects the traffic, the administrator should set 'webfilter-force-off' to disable. This change will enable the FortiGuard web filtering service, allowing it to inspect traffic as intended.
D - is correct
D- is correct
set webfilter-force-off enable = Turn off the FortiGuard web filtering service.
Enterprise_Firewall_7.0_Study_Guide-Online.pdf p 367
D - OK C - wrong. There are 3 methods, anycast is one of them. Read Technical Tip: FortiGuard is not reachable via Anycast default method
set webfilter-force-off disable = WF enabled
With the webfilter-force-off flag set to 'enable' it is telling the FortiGate not to use FortiGuard web filtering. You've enabled turning it off.