Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
Fortinet Certified Professional: FortiGate / FortiOS 7.6 Administrator · Fortinet
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
The only reason not to present a user with the login page must be that the user is already known/authenticated to the firewall. FSSO seems to be one of the valid ways this is possible.
DNS must be allowed to do resolution. Important protocols to add for active authentication: DNS HTTPS HTTP FTP Telnet
Firewall authentication generally requires the DNS service to be enabled in the firewall policy to correctly resolve hostnames during the authentication process. If DNS is not allowed in the firewall policy, the FortiGate cannot resolve external domains, and as a result, the user may not be presented with the login prompt when attempting to access an external website. Reference: FortiOS 7.4.1 Administration Guide: Firewall Authentication Configuration