Fortinet NSE 4 Security: Security Fabric

What is the Security Fabric? - Answer- It is a single pane of glass landscape that makes your entire network visible. Devices are centrally managed and share threat intelligence real time. Reduces complexity of supporting multiple point products. Contains an open API for integration with other products. Name some Security Fabric Products - Answer- Fortigate FortiAP FortiAnalyzer FortiSandbox FortiSOAR FortiSwitch FortiAuthenticator FortiManager FortiCoffee What are the basic essential devices needed to have a functioning security fabric? - Answer- AT LEAST two FortiGates and a FortiAnalyzer Can you pre-authorize new devices? If so, how? - Answer- Yes, you must add the serial numbers to the root gate first. Once it joins the network, it will be automatically connected to the fabric. Where do devices sync from? - Answer- The root down What is split VDOM mode? - Answer- There are two total VDOMs. Root and traffic. Root only does management. What is multi-VDOM mode? - Answer- Create multiple VDOMs that function as multiple independent units. Root can do management and traffic tasks. What is agentless device detection? - Answer- Uses traffic from the devices. Indexed by MAC address. HTTP, TCP, MAC OUI, etc. Works only if devices are on the same segment as the gate, there cannot be another router in between. What is agent device detection? - Answer- Uses the forticlient which sends information to the gate. What are the two mandatory settings on the Security Fabric configuration? - Answer- Fabric name and fabric role From where do you authorize a device to participate in the Security Fabric? - Answer- From the root.