Free FCSS_EFW_AD-7.4 Exam Dumps

Question 16

Refer to the exhibit, which shows the FortiGuard Distribution Network of a FortiGate device. FortiGuard Distribution Network on FortiGate
FCSS_EFW_AD-7.4 dumps exhibit
An administrator is trying to find the web filter database signature on FortiGate to resolve issues with websites not being filtered correctly in a flow-mode web filter profile.
Why is the web filter database version not visible on the GUI, such as with IPS definitions?

A. The web filter database is stored locally, but the administrator must run over CLI diagnose autoupdate versions.
B. The web filter database is stored locally on FortiGate, but it is hidden behind the GU
C. It requires enabling debug mode to make it visible.
D. The web filter database is not hosted on FortiGate: FortiGate queries FortiGuard or FortiManager for web filter ratings on demand.
E. The web filter database is only accessible after manual syncing with a valid FDS server using diagnose test update info.

Correct Answer:C
Unlike IPS or antivirus databases,FortiGate does not store a full web filter database locally. Instead, FortiGatequeries FortiGuard (or FortiManager, if configured) dynamicallyto classify and filter web content in real time.
Key points:
Web filtering works on a cloud-based model:
When a user requests a website,FortiGate queries FortiGuard servers to check its category and reputation.
The response is then cached locally for faster lookups on repeated requests.
No local web filter database version:
UnlikeIPS and antivirus, which download and store signature updates locally,web filtering relies on cloud-based queries.
This is whyno database version appears in the GUI. Flow mode vs Proxy mode:
Inproxy mode, FortiGate cancachesome web filter data, improving performance. Inflow mode, all queries happen dynamically, with no locally stored database.