Free Fortinet FCSS_EFW_AD-7.6 Exam Dumps April 2026

The issue occurs because FortiGate enforces the 'do not fragment' (DF) bit in the packet, and the packet size exceeds the MTU of the network path. When the Windows PC1 (with an MTU of 1500 bytes) attempts to send a 1400-byte packet, the FortiGate interface (with an MTU of 1000 bytes) needs to fragment it. However, since the DF bit is set, FortiGate drops the packet instead of fragmenting it.

To resolve this, the user should adjust the ping packet size to fit within the path MTU. In this case, reducing the packet size to 972 bytes (1000 bytes MTU minus 28 bytes for the IP and ICMP headers) should allow successful transmission.

When adding an additional FortiGate to an enterprise network that is already reaching its resource limits, the goal is to distribute traffic efficiently and ensure high availability.

FGSP (FortiGate Session Life Support Protocol) with external load balancers

FGCP (FortiGate Clustering Protocol) in active-active mode and with switches

Comprehensive and Detailed 150 to 200 words of Explanation From Exact Extract of Enterprise Firewall 7.6 Administrator documents:

According to the FortiManager 7.6 Study Guide regarding Object Management and the Import Device Wizard, FortiManager uses a centralized database where objects are shared across an ADOM. When importing a configuration from a FortiGate, the wizard compares local objects with those already existing in the FortiManager ADOM database.

As shown in the exhibit, conflicts exist for the Web_restrictions and deep-inspection profiles. Since these profiles are shared with other FortiGate devices, a decision must be made:

Selecting 'FortiManager': The local FortiGate settings will be overwritten by the FortiManager's database version upon the next installation, potentially losing site-specific configurations.

Selecting 'FortiGate': The FortiManager ADOM database is updated with the new values. This causes all other FortiGate devices using these shared objects to move into a 'Modified' status, as their local configurations no longer match the updated central database.

To resolve this conflict properly when different devices require different settings for the same profile type, the best practice is to create uniquely named objects (Option B) on the FortiGate before re-importing. This ensures that the specific requirements for the Core1 VDOM are met without affecting the global objects used by the rest of the enterprise network.