NSE 6 – FortiWeb 5.6/6.0 — Question 4

When the FortiWeb is configured in Reverse Proxy mode and the FortiGate is configured as an SNAT device, what IP address will the FortiGate's Real Server configuration point at?

Answer options

• A. Virtual Server IP on the FortiGate
• B. Server's real IP
• C. FortiWeb's real IP
• D. IP Address of the Virtual Server on the FortiWeb

Correct answer: A

Explanation

The correct answer is A because when FortiGate is in SNAT mode, the Real Server configuration must point to the Virtual Server IP on the FortiGate to ensure proper routing. Options B and C refer to the actual server's IP and the FortiWeb's IP, which do not align with the SNAT configuration, while option D points to the FortiWeb's Virtual Server IP, which is not relevant in this setup.