Exam FCP_FGT_AD-7.4 Topic 2 Question 32 Discussion
Actual exam question for Fortinet's FCP_FGT_AD-7.4 exam
Question #: 32
Topic #: 2
Question #: 32
Topic #: 2
Which statement regarding the firewall policy authentication timeout is true?
Suggested Answer: A Vote an answer
A. It is an idle timeout. The FortiGate considers a user to be "idle" if it does not see any packets coming from the user's source IP.
The firewall policy authentication timeout is an idle timeout, meaning that it measures the duration of inactivity for a user. If the FortiGate does not see any packets coming from the user's source IP within the specified timeout period, it considers the user to be idle and may remove the temporary policy associated with that user.
*** If there is no traffic received from the user IP address for the configured auth-timeout (5 minutes by default), user authentication entry will be removed.
* If the user tries to access resources now, FortiGate will prompt the user to authenticate again.
The firewall policy authentication timeout is indeed often an idle timeout, and the FortiGate considers a user to be "idle" if it does not detect any packets coming from the user's source IP within the specified time period.
Reference: https://kb.fortinet.com/kb/documentLink.do?externalID=FD37221
The firewall policy authentication timeout is an idle timeout, meaning that it measures the duration of inactivity for a user. If the FortiGate does not see any packets coming from the user's source IP within the specified timeout period, it considers the user to be idle and may remove the temporary policy associated with that user.
*** If there is no traffic received from the user IP address for the configured auth-timeout (5 minutes by default), user authentication entry will be removed.
* If the user tries to access resources now, FortiGate will prompt the user to authenticate again.
The firewall policy authentication timeout is indeed often an idle timeout, and the FortiGate considers a user to be "idle" if it does not detect any packets coming from the user's source IP within the specified time period.
Reference: https://kb.fortinet.com/kb/documentLink.do?externalID=FD37221
by Patricia at Apr 17, 2025, 08:02 AM
Contact Us
If you have any question please leave me your email address, we will reply and send email to you in 12 hours.
Our Working Time: ( GMT 0:00-15:00 ) From Monday to Saturday
Support: Contact now
Comments
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
Report Comment
Commenting
You can sign-up / login (it's free).