MENU
You have configured an application control profile, set peer-to-peer traffic to Block under the Categories tab. and applied it to the firewall policy. However, your peer-to-peer traffic on known ports is passing through the FortiGate without being blocked.
What FortiGate settings should you check to resolve this issue?
Suggested Answer: B
Get Premium NSE4_FGT_AD-7.6 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
When the Application sensor receives traffic on that port, the protocol decoder will try to determine if the received data matches the HTTPS traffic In this case it will not match because it is P2P traffic, so this will class as violation and blocked The protocol decoder also try to determine what type of traffic it is, and even if it could not figure out it is P2P traffic, it still count as a violation because even though it does not know what it is, it knows for fact it is not HTTPS
26 comments · newest first
MI
Miesha
3 months ago
Replacement Messages for UDP-based Applications might be the issue. UDP is tricky!
MA
Maddie
3 months ago
Network Protocol Enforcement sounds relevant too. Could be allowing traffic.
NI
Nieves
3 months ago
I agree, but what about Application and Filter Overrides? That could be misconfigured.
FR
Frankie
4 months ago
I think we should check FortiGuard category ratings. It might not be updated.
EM
Emogene
5 months ago
Surprised it's not working, I thought it was foolproof!
VA
Valene
5 months ago
Isn't Network Protocol Enforcement supposed to handle this?
RY
Ryann
5 months ago
I thought blocking P2P was automatic with the right settings?
KA
Kattie
6 months ago
Definitely look at Application and Filter Overrides too.
LE
Leota
6 months ago
Check the FortiGuard category ratings first.
ME
Mertie
6 months ago
I'm going with D) Application and Filter Overrides. Sounds like the most relevant option to me.
CA
Carlee
6 months ago
Haha, I bet the answer is always "check the settings" no matter what the question is. Just kidding, I'd say D) is the way to go.
SH
Shaniqua
6 months ago
Hmm, C) Replacement Messages for UDP-based Applications? That's an interesting one, could be worth a shot.
AN
Angelo
6 months ago
I'd go with B) Network Protocol Enforcement. Gotta make sure the protocol enforcement is set up properly.
ED
Eden
7 months ago
D) Application and Filter Overrides seems like the right choice here.
CH
Chara
7 months ago
I wonder if the replacement messages for UDP-based applications could be affecting the traffic. I think we discussed that in class too.
DA
Daniel
7 months ago
Could it be related to Network Protocol Enforcement? I feel like we practiced a question on that, but I can't recall the details.
CE
Ceola
8 months ago
I'm not entirely sure, but I remember something about application and filter overrides possibly allowing certain traffic even if it's blocked in the profile.
DO
Dominga
8 months ago
I think we might need to check the FortiGuard category ratings since that's where the application control profiles get their info from, right?
JU
Juliann
8 months ago
I'm feeling pretty confident about this one. I think the key is to methodically go through each of the options and see which one is causing the issue. Gotta love those troubleshooting questions!
WI
Willow
8 months ago
Ah, I see. The replacement messages for UDP-based applications could also be a factor here. It's worth taking a look at those settings as well.
DA
Dawne
8 months ago
Okay, let me think this through. I'd probably start by checking the Application and Filter Overrides to see if there's anything there that's allowing the peer-to-peer traffic to bypass the block.
YV
Yvonne
9 months ago
I'm a bit confused here. Shouldn't we be looking at the Network Protocol Enforcement settings instead? That seems like the most likely culprit.
HE
Hester
9 months ago
Hmm, this seems like a tricky one. I'd start by checking the FortiGuard category ratings to make sure the peer-to-peer traffic is properly categorized.
AN
Annalee
2 months ago
Don't forget about Application and Filter Overrides. That might help too!
JA
Jani
3 months ago
What about Network Protocol Enforcement? Could that be an issue?
LI
Lisha
3 months ago
I agree, checking FortiGuard ratings is a good first step.