Question 10
A FortiManager incident involves NAT port forwarding to FortiManager: the team cannot register a FortiGate outside a private manager network when the manager sits behind NAT. What targeted troubleshooting check is appropriate?
Explanation
Correct Answer
This is the focused troubleshooting check for NAT port forwarding to FortiManager: compare published versus internal port and translation if connection reaches the wrong host. It tests the failure most relevant to the goal to register a FortiGate outside a private manager network when the manager sits behind NAT before unrelated settings are changed.
Incorrect Answers
That check is relevant to a fault in FGFM IPv4 TCP 541 path diagnosis used to restore the FortiGate-initiated secure management tunnel when GUI HTTPS works but device onboarding fails. It does not directly isolate the described NAT port forwarding to FortiManager failure to register a FortiGate outside a private manager network when the manager sits behind NAT.
That check is relevant to a fault in FortiGate-initiated FGFM session used to troubleshoot a manager that cannot initiate a persistent session back to the gateway. It does not directly isolate the described NAT port forwarding to FortiManager failure to register a FortiGate outside a private manager network when the manager sits behind NAT.
That check is relevant to a fault in FGFM session certificate trust troubleshooting used to distinguish management-protocol trust failure from a reachable TCP socket. It does not directly isolate the described NAT port forwarding to FortiManager failure to register a FortiGate outside a private manager network when the manager sits behind NAT.



Fortinet NSE 5 - FortiManager 7.6 Administrator (FCP_FMG_AD-7.6) Practice Tests