Exam FCSS_EFW_AD-7.6 Topic 3 Question 68 Discussion
Actual exam question for Fortinet's FCSS_EFW_AD-7.6 exam
Question #: 68
Topic #: 3
Question #: 68
Topic #: 3
Refer to the exhibit, which shows the FortiGuard Distribution Network of a FortiGate device.
FortiGuard Distribution Network on FortiGate
An administrator is trying to find the web filter database signature on FortiGate to resolve issues with websites not being filtered correctly in a flow-mode web filter profile. Why is the web filter database version not visible on the GUI, such as with IPS definitions?
FortiGuard Distribution Network on FortiGate
An administrator is trying to find the web filter database signature on FortiGate to resolve issues with websites not being filtered correctly in a flow-mode web filter profile. Why is the web filter database version not visible on the GUI, such as with IPS definitions?
Suggested Answer: C Vote an answer
Unlike IPS or antivirus databases, FortiGate does not store a full web filter database locally.
Instead, FortiGate queries FortiGuard (or FortiManager, if configured) dynamically to classify and filter web content in real time.
Key points:
Web filtering works on a cloud-based model:
When a user requests a website, FortiGate queries FortiGuard servers to check its category and reputation.
The response is then cached locally for faster lookups on repeated requests.
No local web filter database version:
Unlike IPS and antivirus, which download and store signature updates locally, web filtering relies on cloud-based queries.
This is why no database version appears in the GUI.
Flow mode vs Proxy mode:
In proxy mode, FortiGate can cache some web filter data, improving performance. In flow mode, all queries happen dynamically, with no locally stored database.
Instead, FortiGate queries FortiGuard (or FortiManager, if configured) dynamically to classify and filter web content in real time.
Key points:
Web filtering works on a cloud-based model:
When a user requests a website, FortiGate queries FortiGuard servers to check its category and reputation.
The response is then cached locally for faster lookups on repeated requests.
No local web filter database version:
Unlike IPS and antivirus, which download and store signature updates locally, web filtering relies on cloud-based queries.
This is why no database version appears in the GUI.
Flow mode vs Proxy mode:
In proxy mode, FortiGate can cache some web filter data, improving performance. In flow mode, all queries happen dynamically, with no locally stored database.
by Newman at Mar 04, 2026, 07:15 PM
0
0
0
10
Comments
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
Report Comment
Commenting
You can sign-up / login (it's free).