Fortinet Exam NSE6_FWB-6.4 Topic 2 Question 57 Discussion

Actual exam question for Fortinet's NSE6_FWB-6.4 exam

Question #: 57
Topic #: 2

Refer to the exhibits.

FortiWeb is configured in reverse proxy mode and it is deployed downstream to FortiGate. Based on the configuration shown in the exhibits, which of the following statements is true?

AFortiGate should forward web traffic to the server pool IP addresses.

BThe configuration is incorrect. FortiWeb should always be located upstream to FortiGate.

CYou must disable the Preserve Client IP setting on FotriGate for this configuration to work.

DFortiGate should forward web traffic to virtual server IP address.

Show Suggested Answer

Suggested Answer: A

by Carry at Mar 19, 2025, 02:36 AM

Limited Time Offer

25%

Off

Get Premium NSE6_FWB-6.4 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Lili

1 months ago

Wait, so we're talking about web traffic, but the question mentions a server pool? I thought FortiWeb was for web application firewalling, not server load balancing. Guess I need to brush up on my Fortinet trivia.

upvoted 0 times

...

Salome

1 months ago

Ah, the age-old debate of upstream vs. downstream. As long as the settings are correct, I think D is the way to go. Though I do wonder if the Fortinet engineers have been drinking too much coffee lately.

upvoted 0 times

...

My

2 months ago

Hold on, are we sure FortiWeb should always be upstream? That's not necessarily true, it depends on the specific use case. I'll go with D, it makes the most sense to me.

upvoted 0 times

...

Leah

2 months ago

Wait, FortiWeb is downstream to FortiGate? That's a bit unconventional, but as long as the configuration is set up properly, it should work. I'd go with D.

upvoted 0 times

Minna

11 days ago

I agree, as long as the setup is correct, it should work fine.

upvoted 0 times

...

Karan

13 days ago

I agree, as long as everything is set up correctly, it should work fine.

upvoted 0 times

...

Shayne

15 days ago

Yeah, that seems like the right choice based on the configuration.

upvoted 0 times

...

Wayne

20 days ago

Yeah, that makes sense. It's important to follow the configuration properly.

upvoted 0 times

...

Fausto

23 days ago

I think FortiGate should forward web traffic to the virtual server IP address.

upvoted 0 times

...

Kiley

1 months ago

I think FortiGate should forward web traffic to virtual server IP address.

upvoted 0 times

...

Flo

2 months ago

Hmm, the key here is that FortiWeb is in reverse proxy mode, so the traffic should be forwarded to the virtual server IP address on FortiWeb, not the server pool IPs. D is the correct answer.

upvoted 0 times