Fortinet Exam NSE7_EFW-6.0 Topic 3 Question 5 Discussion

Actual exam question for Fortinet's NSE7_EFW-6.0 exam

Question #: 5
Topic #: 3

An administrator has decreased all the TCP session timers to optimize the FortiGate memory usage. However, after the changes, one network application started to have problems. During the troubleshooting, the administrator noticed that the FortiGate deletes the sessions after the clients send the SYN packets, and before the arrival of the SYN/ACKs. When the SYN/ACK packets arrive to the FortiGate, the unit has already deleted the respective sessions. Which TCP session timer must be increased to fix this problem?

ATCP half open.

BTCP half close.

CTCP time wait.

DTCP session time to live.

Show Suggested Answer

Suggested Answer: A

http://docs-legacy.fortinet.com/fos40hlp/43prev/wwhelp/wwhimpl/common/html/wwhelp.htm?context=fgt&file=CLI_get_Commands.58.25.html

The tcp-halfopen-timer controls for how long, after a SYN packet, a session without SYN/ACK remains in the table.

The tcp-halfclose-timer controls for how long, after a FIN packet, a session without FIN/ACK remains in the table.

The tcp-timewait-timer controls for how long, after a FIN/ACK packet, a session remains in the table. A closed session remains in the session table for a few seconds more to allow any out-of-sequence packet.

by Deonna at May 07, 2022, 04:57 PM

Limited Time Offer

25%

Off

Get Premium NSE7_EFW-6.0 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Currently there are no comments in this discussion, be the first to comment!