Discuss Fortinet NSE8_812 Exam Topic 6 Question 57

You deployed a fully loaded FG-7121F in the data center and enabled sslvpn-load-balance. Based on the behavior of this feature which statement is correct?

AYou can use src-ip or dst-ip-dport on dp-load-distribution-method to make SSL VPN load balancing work as expected.

BIf an FPM goes down, SSL VPN IP pool IP addresses will be re-allocated to the remaining FPMs.

CTo have better traffic distribution you should use IP pools that increment in multiples of 12.

DEnabling SSL VPN load balancing will clear the session table.

Suggested Answer: A

Get Premium NSE8_812 Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

26 comments · newest first

Chana 1 month ago

D is a concern. Clearing the session table could disrupt active users.

Antonio 1 month ago

C sounds interesting, but why multiples of 12? That seems odd.

Kaycee 2 months ago

I lean towards B. If an FPM fails, reallocating IPs is crucial for continuity.

Stefania 2 months ago

I think option A makes sense. Using src-ip or dst-ip-dport seems logical for load balancing.

Noemi 2 months ago

D is misleading. Clearing the session table could disrupt users.

Lynelle 2 months ago

C seems odd. Why multiples of 12? Doesn’t seem logical.

Barrie 2 months ago

I’m leaning towards B. Re-allocating IPs sounds crucial if an FPM fails.

Avery 2 months ago

I think option A is correct. It makes sense for load balancing.

Lennie 3 months ago

D sounds wrong. Clearing the session table seems counterproductive.

Steffanie 3 months ago

C is interesting, but I’m not sure about the multiples of 12.

Eun 3 months ago

I disagree, B seems more accurate. IPs should be re-allocated if an FPM fails.

Elsa 3 months ago

I think option A is correct. It makes sense for load balancing.

Marica 3 months ago

Wait, are we sure about B)? That seems off to me.

Kizzy 4 months ago

D) sounds right, clearing the session table is a common side effect.

Shawna 5 months ago

C) is interesting, but I’ve never heard of using multiples of 12.

Billy 5 months ago

I disagree, B) is misleading, IPs don’t just reallocate like that.

Eugene 5 months ago

A) is correct, src-ip works great for load balancing.

Lyda 6 months ago

Wait, really? I thought sessions would persist through that!

Markus 6 months ago

D is true, enabling it does clear the session table.

Cristal 6 months ago

C is interesting, but why multiples of 12? Sounds random.

Albert 6 months ago

I disagree, B seems off. FPMs should handle sessions better.

Patria 6 months ago

A is correct, src-ip works great for load balancing.

Eladia 6 months ago

I vaguely recall that enabling SSL VPN load balancing might affect the session table, but I can't remember the specifics. Did it clear it or just modify it?

Glory 7 months ago

I'm a bit confused about the IP pools. Did we really discuss using multiples of 12 for better distribution? That seems odd to me.

Cristen 7 months ago

I feel like I saw a question about FPMs and IP pool reallocation in practice tests. If one goes down, the remaining ones should take over, right?

Raul 7 months ago

I think I remember something about using src-ip or dst-ip-dport for load balancing, but I'm not entirely sure if that's the right method for SSL VPN.

Fortinet NSE8_812 Exam - Topic 6 Question 57 Discussion