Learn how to troubleshoot and resolve push update failures for FortiGate devices located behind a NAT device by configuring the virtual IP address, ports, and NAT device IP address on FortiManager.
Table of Contents
Question
Push updates are failing on a FortiGate device that is located behind a NAT device.
Which two settings should the administrator check? (Choose two.)
A. That the virtual IP address and correct ports are set on the NAT device
B. That the override server IP address is set on FortiManager and the NAT device
C. That the external IP address on the NAT device is set to DHCP and configured with the virtual IP
D. That the NAT device IP address and correct ports are configured on FortiManager
Answer
A. That the virtual IP address and correct ports are set on the NAT device
D. That the NAT device IP address and correct ports are configured on FortiManager
Explanation
When a FortiGate device is behind a NAT device, the administrator should ensure that the NAT device is configured correctly to allow communication between the FortiGate and FortiManager. This includes configuring the virtual IP address and ports on the NAT device, as well as configuring the NAT device’s IP address and the required ports on FortiManager.
The virtual IP address and ports on the NAT device should be set to forward traffic from FortiManager to the FortiGate device’s internal IP address and management ports. Typically, the FortiGate’s management ports are TCP/541 and TCP/8001.
On the FortiManager side, the administrator should configure the NAT device’s public IP address and the corresponding ports used for communication with the FortiGate. This ensures that FortiManager can reach the FortiGate device through the NAT device.
Incorrect options:
B) The override server IP address is not a configuration option for NAT devices. It is a FortiManager setting used to override the default server IP address for push updates.
C) Setting the external IP address on the NAT device to DHCP is not necessary for push updates to work. The NAT device’s IP address can be static or dynamic, as long as it is correctly configured on FortiManager.
Fortinet NSE5_FMG-7.2 certification exam practice question and answer (Q&A) dump with detail explanation and reference available free, helpful to pass the Fortinet NSE5_FMG-7.2 exam and earn Fortinet NSE5_FMG-7.2 certification.