Câu 22: NSE7: NSE7 Enterprise Firewall - FortiOS 5.4

View the exhibit, which contains a screenshot of some phase-1 settings, and then answer the question below. The VPN is up, and DPD packets are being exchanged between both IPsec gateways; however, traffic cannot pass through the tunnel. To diagnose, the administrator enters these CLI commands: However, the IKE real time debug does not show any output. Why?

1. A. The debug output shows phases 1 and 2 negotiations only. Once the tunnel is up, it does not show any more output.
2. B. The log-filter setting was set incorrectly. The VPN's traffic does not match this filter.
3. C. The debug shows only error messages. If there is no output, then the tunnel is operating normally.
4. D. The debug output shows phase 1 negotiation only. After that, the administrator must enable the following real time debug: diagnose debug application ipsec -1. — đáp án hiện tại