Fortinet NSE7_NST-7.2 - Fortinet NSE 7 - Network Security 7.2 Support Engineer

Routing Table Analysis:

The first command output (get router info routing-table database) shows two default routes:

One viaport1with a distance of10.

One viaport2with a distance of20.

The second command output (get router info routing-table all) only shows the route viaport1.

Administrative Distance:

The administrative distance (AD) is a measure used by routers to select the best path when there are multiple routes to the same destination. The lower the distance, the more preferred the route.

In this scenario, the route viaport1has a lower distance (10) compared to the route viaport2(20), making it the preferred route.

Route Selection:

Since the route viaport1has a lower distance, it is the only one installed in the active routing table, which is why it appears in the second command output, and theport2route does not.

References:

Fortinet Community: Routing behavior depending on distance and priority​(Welcome to the Fortinet Community!)​​(Welcome to the Fortinet Community!)​.

Fortinet GURU: Route priority and administrative distance explanations​(Fortinet GURU)​.

The session table entry provided shows detailed information about a specific network session passing through the FortiGate device. From the session details, we can see that the session has various attributes such as state, protocol, policy, and inspection details.

The session state (proto_state=11) indicates that the session is being actively processed and inspected.

Thenpd_state=00000000suggests that the session is being handled by the CPU rather than offloaded to a Network Processor (NP).

The session is marked for security profile inspection, evident from the detailed byte/packet counts and other session parameters.

From these indicators, it's clear that FortiGate is using its CPU to perform security profile inspection on this session rather than simply forwarding the traffic without inspection or relying solely on IPS inspection.

References

Fortinet Documentation on Session Table

Fortinet Community Discussion on Session Table