PrepAway - Latest Free Exam Questions & Answers

Which solution meets these requirements?

A data center for example.com hosts several separate Web applications. Users authenticate with all of them by providing their Active Directory (AD) login credentials. You do not have access to Example, Inc.’s AD server.
Your solution must do the following:
– provide single sign-on (SSO) for all protected Web applications
– prevent login brute forcing
– scan FTPS connections to the Web servers for exploits
– scan Webmail for OWASP Top 10 vulnerabilities such as session cookie hijacking, XSS, and SQL injection attacks
Which solution meets these requirements? then forward all traffic to web server. http://cookbook.fortinet.com/providing-single-sign-using-ldap-fsso-agent-advanced-mode-expert/

PrepAway - Latest Free Exam Questions & Answers

A.
Apply FortiGate deep inspection to FTPS. It must forward FTPS, HTTP, and HTTPS to FortiWeb. Configure
FortiWeb to query the AD server, and apply SSO for Web requests. FortiWeb must forward FTPS directly to
the Web servers without inspection, but proxy HTTP/HTTPS and block Web attacks.

B.
Deploy FortiDDos to block brute force attacks. Configure FortiGate to forward only FTPS, HTTP, and
HTTPS to FortiWeb. Configure FortiWeb to query the AD server, and apply SSO for Web requests. Also
configure it to scan FTPS and Web traffic, then forward allowed traffic to the Web servers.

C.
Use FortiGate to authenticate and proxy HTTP/HTTPS; to verify credentials, FortiGate queries the AD
server. Also configure FortiGate to scan FTPS before forwarding, and to mitigate SYN floods. Configure
FortiWeb to block Web attacks.

D.
Install FSSO Agent on servers. Configure FortiGate to inspect FTPS. FortiGate will forward FTPS, HTTP,
and HTTPS to FortiWeb. FortiWeb must block Web attacks, then forward all traffic to the Web servers.

Explanation:

FSSO agent integrate fortigate with AD then inspect bruteforce,FTPS,HTTP, and HTTPS using fortiweb and
Reference:


Leave a Reply

Your email address will not be published. Required fields are marked *