Question 280
While assessing On-site FortiGuard distribution role for the requirement to reduce internet update traffic to many managed FortiGate devices, which documented limitation should the reviewer remember?
Explanation
Correct Answer
The stated scope boundary specifically qualifies On-site FortiGuard distribution role: being a local FDS is not equivalent to policy package compilation and install. The control is appropriate for the operational need to reduce internet update traffic to many managed FortiGate devices, but should not be credited with unrelated behavior.
Incorrect Answers
That caveat describes FortiAnalyzer feature enablement in a different management scenario, which addresses provide integrated log analysis and reporting in a permitted FortiManager deployment. It is not the specific limitation of On-site FortiGuard distribution role requested in this design review.
That caveat describes ADOM-aware administrative delegation in a different management scenario, which addresses give an MSSP operator access only to an assigned customer's devices. It is not the specific limitation of On-site FortiGuard distribution role requested in this design review.
That caveat describes Central configuration management role in a different management scenario, which addresses maintain a consistent approved firewall policy for multiple managed FortiGates. It is not the specific limitation of On-site FortiGuard distribution role requested in this design review.



Fortinet NSE 5 - FortiManager 7.6 Administrator (FCP_FMG_AD-7.6) Practice Tests