Given the following error message:
FortiManager fails to import policy ID 1.
What is the problem?
A.
FortiManager already has Address LAN which has interface mapping set to “internal” in its database, it is
contradicting with the STUDENT-2 FortiGate device which has address LAN mapped to “any”.
B.
FortiManager already has address LAN which has interface mapping set to “any” in its database; this
conflicts with the STUDENT-2 FortiGate device which has address “LAN” mapped to “internal”.
C.
Policy ID 1 for this managed FortiGate device already exists on the FortiManager policy package named
STUDENT-2.
D.
Policy ID 1 does not have interface mapping on FortiManager.
Explanation:
http://kb.fortinet.com/kb/documentLink.do?externalID=FD38544
I think this should be “b” Fortimanager is “internal” fortigate is “any”.
1
0
This is wrong. Even by looking at the KB article in the explanation you can tell it’s wrong. In fact, it shows you explicitly in the exhibit that the problem is interface binding for an address object. You can see the conflict – on FortiManager side it is set to “any” but on FortiGate side it’s set to “internal”.
Correct answer therefore is B
2
0