The administrator analyzed the traffic between a branch FortiGate and the server located in the data center, and noticed the behavior shown in the diagram. When the LAN clients located behind FGT1 establish a session to a server behind DC-1, the administrator observes that, on DC-1, the reply traffic is routed over T2, even though T1 is the preferred member in the matching SD-WAN rule. What can the administrator do to instruct DC-1 to route the reply traffic through the member with the best performance? (Choose one answer)

A. Enable reply-session under config system sdwan
B. FortiGate route lookup for reply traffic only considers routes over the original ingress interface
C. Enable snat-route-change under config system global
D. Enable auxiliary-session under config system settings

Brave-Dump Clients Votes

D 66.67%

B 33.33%

Comments

Brave-Dumps Admin 2025-06-12 15:12:47

Selected Answers: D

As per FCSS - SD-WAN 7.4 Architect Study Guide page: 190

Jonathan 2025-08-10 09:30:43

Selected Answers: B

Auxiliary sessions prevent dirty flags and has nothing to do with SD-WAN self Healing, the answer should be B

Brave-Dumps Admin 2025-08-10 12:57:05
Dear Jonathan, D is the correct as per sd-wan 7.4 study guide page 190 If you enable auxiliary sessions on both FortiGate devices in the previous topology, FGT-2 can now route the reply traffic through the best performing member... please check it, you can download the study guide from: https://brave-dumps.com/study-and-lab-guides

Jonathan 2025-08-12 02:03:06

Selected Answers: D

You are tottaly right, thanks Omar