Pass Your Fortinet NSE4_FGT-6.4 Exam Easy!

Fortinet NSE4_FGT-6.4 Fortinet NSE 4 - FortiOS 6.4 exam dumps vce, practice test questions, study guide & video training course to study and pass quickly and easily. Fortinet NSE4_FGT-6.4 Fortinet NSE 4 - FortiOS 6.4 exam dumps & practice test questions and answers. You need avanset vce exam simulator in order to study the Fortinet NSE4_FGT-6.4 certification exam dumps & Fortinet NSE4_FGT-6.4 practice test questions in vce format.

FortiGate Firewall V6.4

9. Lecture-09:FortiGate Firewall Initial Working Lab.

In our last lecture, we discussed some basics related to the 40-gate firewall. So let's create a smart topology in our initial working lab. Okay, then how is everything working and what do we require to configure a 40-gate firewall? Then, step by step, whatever is coming in, So we will discuss this in detail. Okay, so we will use a small topology to configure 40 G. So let me go to GNS Three. You can do the same thing in Egypt. If you have any problems, please let me know and I will send you an email as well. Okay so let me drag a firewallfrom here which we installed last time. So this is a 48-gigabyte firewall, and from here I'll drag a net cloud to get internet. Okay? So don't change anything here because it will show you two things. No need to change anything, just drag and drop. So this is my Internet; let me change it to "internet." Either ISP is whatever you want to give them, and next I need one system or two; it's up to you. So let me try one web term okay if youdon't know web term or toolbox I will show you. So this is one inside the PC, this is my firewall, and this is the internet. And let's take another thing as well, for management. So let me drag a cloud from here; this is my management interface, not a net cloud. "Net cloud" is a different thing, and "cloud" is a different thing. Okay so this one is my this will be mgmt. This cloud will be used for management by connecting to this device and displaying a graphical user interface. So mgmt this is internet. So let me connect port one to the internet interface. Port Two is my lane. Okay? And port number three is my management. Okay? So before doing management reachinterface click on this cloud. Okay, the one that I dragged to configuration and changed to, "Let's see, you can use WebNet when you are in a physical interface as well as my WiFi, which is connected right now." But anyway, I will use the LoopBack interface. I already created one loop bank interface, if you don't know; I will show you that one as well. In your system, you can create a loopback interface to apply. Now I will connect port number three to the loopback interface. Okay, let me drag this one and make them align. Okay and it's better to and then we will do our joband let's connect both and make them align here this way. Okay, so this is management, which is connected through a lubricate interface. Let me change the symbol to make it a good symbol so that we know this is our management interface PC suppose client okay so this become all management PC. Okay? And this one is okay right click on this PC. This is a docker, so go to the configuration tab and assign any static IP address. So, from here, remove hash from auto hash. Here and here give the many ranges. Suppose we want to use one range, so one is PC 1, the gateway will be 100, and this is DNS DNS. We will use public DNS, which is Google DNS. You can use one of them, which is also a DNS server. Whenever you make changes and the device is on Docker, you have to make them stop and turn on again; if that's okay, then this one is done. So we're using this range for this site's lane. Let me put this one here, and the gateway is that this will be $100. Okay, done. And this one is unnecessary. This is the Internet. Remember that the Internet is a net cloud. So next up is 2. How I know this is two and the range is182, 168, one one 400:24 how I know, you canknow from here go to virtual network editor. Okay? And this is NetCloud. So my one is, and when I click NetSettings Gateways 1142 to go out, either you can check from here or go to network interface, change it up to settings, and check your net cloud. We have a net eight on this one. From here you will find one, one four. So in my case, this is one of four. Maybe in your case, it will be different. So you have to use that range. Okay, this side, this side, you can use my one; it's okay. Now the question is how to assign this management. And so I connect this to my loop bank. So I have created a loopbake interface here. So let me assign any IP range. So let me go to Lubbake interface andsuppose 192-16-8312 the system and gateway will beone ninety two, one sixty eight, three hundredsuppose so this is my management interface rangewhich I signed to my loop interface. If you don't know how, you can create a loopback interface in your system. You can also connect this cloud using the VM NetEight and VM NetOne interfaces. Right-click on the cloud, and rather than click this one, you can use your WiFi. You can use your LAN. You can use net one. You can use Web-Eight, and I have a Bluetooth as well, so you can use that one as well. But anyway, in my case, I use a blue bank interface, just the basic thing. So this side is my win, this side is my land, and this side is my management. Okay? Now, by default, port one is managed by DHCP, and we normally use port one for management, but in my case, we are using port three for management, and we are also using the static method. There is no DHCP because I just assigned IP here,let me type that IP three one this is management,this PC and we will assign 300 here. So, right-click on this system, select Console, and then type admin; there is no password. Type "enter," then "new password," one, two, three," then "confirm" one, two, three. Now I log in to 40 gate firewall shows system interfaceso you know it's get IP by DHCP on this one. So you can do two things Copy this one and use this IP to access management, then change port three and type an IP graphically, or you can do command-based operations in detail. We have one lecture by command. What is this command? What is port? What is a show? What is a list, and how do I configure one? but anyhow in this case I willgo to configuration config system which system? I want to go to Interface. So now I'm in interface mode. Which interface is used for management? Port three. So let me go to edit port three, type tab one, tab two, and tab three. Now it's changed to port three. Okay and enter. Now I'm in Port Three. What I want to do with port three set mode tostate you can basically by default stating this one is DHCP. I'd like to change the mode to "stating now," and I'd like to allow set access to what? I want to allow the management purpose So, http://http: I want to allow 10 net, what are the so on this interface? I allowed these management protocols, but I want to set the IPS address as well. So type "set IP" and which IP (192,168,324) is the subnet mark and press Enter. Now, type "end" to save the configuration and come out of the configuration end. So let me check again, showing the system interface and question mark. So you see, now there is an IP. On the other side, we have this IP, three one, so it's better to do one thing: execute ping and let me pin this IP. Yes, I can ping my own IP and oneis the system IP so that means my reachabilityis there so no need of anything. It's also come up now the loop interface. Now go to any browser and type that IP which IP 100okay, so let me go to browser enter 192 one 6300 inmy case you can give any IPS not to be this oneadmin and password reset one, two, three so now I log into it's asking you do you want to change? So let's change the name so that FPGA is the host name. It will come up here. Okay, so that's the basic thing which come upnow we discussed already the status and dashboard. Now we want to configure a smart topology so that PCs can access the Internet and we can see the traffic and everything. Let me go to this PC. Can I reach the Internet? No, because there is nothing configured and between them is a firewall, so it's not working. This piece is not reachable on the internet. So let's configure a small thing. So first of all, I need to go to the network and go to interfaces. I have three interfaces, basically port one, port two land, and port three management. Okay? As a result, after this class, we will go over interfaces in depth. So let's first interface. Click on this one. So, port one is my Vaninterface, and it has a DHCP-assigned IP address. Let me give them a name when they connect to the Internet, or you can assign the role if you prefer. We will discuss this one in detail as well. Anyway, alias may be just the name—another name—so that we understand which interface is this one. So I save man and let me make them manual IPs and give them 100 to make our lives easier. So it means one one 4100 100 and management is 300. It doesn't be like this one. In my case, I'm doing this one. We don't need management on this interface. So let me remove this one, which is just pinned to be loud, as well as this Waninterface, and then my Van interface will be ready. It's here now, and it's coming with Wan. Now let's go to port two, which is the lane interface. So Port Two is here. Click and let me type lanes and manual IP. So let me assign IP 124 as a subnetmask. You can type in this way as well. It's up to you which one is easy for you, but 24 slash 24 is easy to do. Its manual length We are 100 percent certain about this one. Yeah. So we 100 this interface and only allowed ping on this interface, and now we just need to give them a name, otherwise known as this one, port 3, and we already assigned IP through commands. So type MGT, supposing MGT management, so the entities We know everything is already there, and we already allowed ping, http, https, and SSH through command; okay, so this was the first step to assigning IPS to the interfaces. Forget interfaces; what is there, and how do we know what a ping is? What is this thing? We will discuss this a bit later. We definitely need a DNS as the first step. And DNS, we'll go over it again: what is DNS, why do we use it, and what are the benefits? But anyhow second thing is here DNS. We need DNS to translate domain names to IPs and IPs to domains. By default, they are using their own DNS. We don't need this one. So let me change a DNS, and another DNS is one okay Google DNS, and this one is a faster DNS than the Google one, and I will apply it to your case; you can use your own as well. So, DNS is done. Two things Now we need a route so that the internal traffic can go out to the Internet. So let's go to networking. There is a static route under Network, so whenever you select anything, it will be green like this one. Okay, there is no way to go out. Click on "Create new Okay, so what is my next one? Four. Normally we give Internet IP IP So in my case, IP is 1142, and I will show you what one one four is. In your case it will be different and it's always two inyour case so don't worry about two but you have to worryabout this subnet it will be changed in your case. So I click on setting route I sayanything means any traffic gateway should be 192-168-1142. next to this one. Okay, and when interface is selected automatically, if it is not, you can choose this while I give them the alias so that I can understand when interface administrative distance is reached, we will discuss again, and status is definitely enabled, and there are more options. We will discuss priority but anyhow just typethis one and press okay route is done. So we do the basics—interface DNS, set up a static route—but our system is still inaccessible from the internet. It requires something more and that one is thepolicy go to down there is a policy andobject and there is IP four policy. Click on "IP 4 policy." By default, the one policy implicitly denies everything. That's why our internal traffic cannot go outside. So let's create a new policy and whatever nameyou want to give them suppose allow anything Igive them this name you can give me fromwhere the traffic will come in coming in interface. So my incoming interface is land. That's why I give them the alias name "incoming interface." What is the outgoing interface when this single acceptable source is the source? We will go over this again in depth. I'll say all means anything subnetzero, zero anyone right now, so I'll say all destination. We will go over this again in depth. You can give us a specific destination, and my guess this time is that the destination can be any type of internet location. Should you say which time? Right now, I say start time zero, end time zero, and anything on Saturday, Sunday, all days of the week, and all year. But you can put a restriction scheduled as well. So this time again, I will say always. So don't change this one service again I will sayall the services you can allow http http again wewill do in detail right now If your local subnet is going outside and needs to be netted to this IP, flow-based networking is definitely enabled. So yes, again, we will do the net in detail, and the security profile we will do in detail. Yes the only thing choose all session so logsthat we can see the logs in detail. Okay, so select all session logs in out traffic for all sessions from land to when is going to generate a log so that we can see it and don't change anything and press OK so we have also done policy. Okay, now we can check the traffic it will send if everything is fine, so let me generate this one so that I can reach Facebook and go to generate a new one for Twitter. So now my traffic is going; previously, it was not working from land to where I could go, so what do I do? I apply IPS to interfaces, then I configure DNS. Then I configure route then I configure policy and nowI check the PC it's reachable to the internet. So this is a basic method of configuring a firewall; how do I know it's working? First of all, we can see this policy by browsing the there is a zero byte so let me refresh fromhere down so it will show some traffic by theway, if this policy has been hit refresh from hereso you will see look at 3.60 MB traffic isbeing passed through without anything it means this working. Second thing from here I can check go to dashboard. And the last time we talked about top usage land, so my PC is definitely in that lane. When I click on land, you will see one who is one of this PC go to terminal, and if I say country, so this is my PC one; it's showing you as a source and destination. Is this one facebook.com because I visit top application limited (not showing here if you don't have a licence anyway) top usage showing another thing 40 view everything they are starting for 40 it means view to view visiting source so I want to see the source so my source is one and this much bar they use this is the session they created and bandwidth they use where they visit so this will be a destination Because this is the first time they use UDP 53 DNS traffic, it's showing the data again, which we will go over in detail; another is policies, of which only one has been hit, so we have only one policy that allows anything; that policy has been used for all sessions and any sessions it creates, so you could start from eight because they will first check the DNS, and now there is a Twitter and also a Facebook. And from besides here we check source. We check the destination. We check from dashboard land traffic all session and there isa login report again from here forwarding traffic you can seealso the result so one is the IP address this timedestination is this one this is the reserve and this isthe policy being hit okay so it means that everything isworking and we see the traffic is passing through this firewallso let me go to sleep if I miss something okayso we changed the management IP by this command and thistime here I type one one but in my case Itype 192 and three it can be anything we will login then we go to interfaces and we give them alists to let me know which interfaces we are working threeinterfaces we utilise land and when and management interface okay thenwe configure DNS we went to network and DNS configure DNSthis is the DNS to use this time I use oneone one it can be anything then we configure a defaultroute so in this slide I use eight two because atthat time my network interface was eight but this time mynetwork net is one one four so that's why I toldyou you have to check your one and that's why Iwritten income as well then what we done? Then state the ground we configure then create apolicy allow traffic land to win all anything okay. There is no need to do anything; allow net should be and policy, then we saw the traffic from this PC and configured the PC IP as follows: here I configure seven, but in this new lab we configure one okay. So this is the PC, and then we generate some traffic; here I use a pink, but in any case, we use a Facebook, so from the source, we verify from Forti view destination, then from our session, we verify from policy the land and DMZ zone, and from this traffic, we verify forwarding traffic as well.

10. Lecture-10:FortiGate Firewall Interfaces and Zones.

First interfaces can be done in a working lab. I went to interfaces and I configured interfaces, so now let's go to interfaces What are interfaces and 40-gate gate firewall?As we know, in every firewall, router, and switch we have interfaces, okay? These interfaces can be physical interfaces. This can be a workable interface, okay? It can be a logical interface, like a lubricant interface; this is a logical or virtual interface, and either way, when we configure VPN, we create a virtual interface, the same thing you will find in 40Gate firewall interfaces; it can be a physical interface. It can be a virtual. It can be a new, big interface. It can be a VPN workflow interface an interface weare using to flow the traffic definitely all our trafficare coming and going through these interfaces the logical interfaceswe are using for some other purposes like a lubricantinterface we are using in BGP we can use themin OSPF and we can use them in EHRP formany purpose but physically most of the time we areusing to flow the traffic and the traffic is goingthrough these interfaces now in 48 firewall it depends onthe model of the firewall there are so many modelsyou can find from eight to 40 physical interfaces portwhich we call them port as well these interfaces andsome interfaces will be there will be written like amanagement interface there will be written when interface. When one. When two there will be lane interface there will bewritten DMZ as well and some model and the mostof them is like a physical interface this way likea switch where you can connect your lane PC oryou can use them for a DMZ okay. So these are the interfaces; logically, we can create a VLAD in the 40 gate firewall; we can create new big interfaces; we can create VPN tunnel interfaces; and there are also physical interfaces, and we can apply labelling to the interfaces, as I show you. So this is the front end of the 40 gate firewall, and this one is management of some of them for when okay. If you can't get in, man. You can change them anytime; it's not much that you have to use those interfaces for; when it's up to you, you can convert them to your lane as well, but anyhow, you have so many interfaces, up to 40 to 48 interfaces, so you can utilise them now if we go here. OK. To interfaces, that's the first thing to be done. The first thing is, "These are my interfaces," and here I have twelve interfaces and ten, so from one to ten, I have interfaces, and these are the names of the interfaces. The type of the interfaces these are physical interfaces that's whyit's written physical interfaces now when I create logical it willshow me some other type Remember that these interfaces are not members of anything right now, such as a VLAN or anything else. IP and net mask First, the IP address is from forward slash to this one, and netmas is the subnet mask as we know it. this one is zero. Because there is no IP and no subnet masks, only these two now have administrative access; we will go over administrative access in detail, what administrative access you want to allow done on these interfaces because I only have this interface, which is a management interface, so I allowed pink. Picket Internet Grouper https hypertext transfer protocolCQR SSH CQR shell http hypertext transport protocol andtelnet so I can manage this interface by usingthese management protocol so this call administrative access is This interface belongs to the DHCP client, We can use them as a DHCP client like the awareness interface, okay? if I change them. I can change them to DHCP as well; now it will get an IP because it's our external interface okay.This one will eventually get an IP address via DHCP; it will take some time. IPR 202, so it is the other DCP client—either DHCP ranges okay and reference where all theseinterfaces has been used so it's not being used. This one has been used somewhere, so that's why I said reference When you click on this reference, it will show you that in one policy this interface has been used, and that's true, yes. We use them in one policy, so reference means where this interface has been used, so it's a good thing to find out where this interface has been used, so this is underneath the interfaces these details name type. Member. IP networks. Administrative devices. DHCP Clients and Ranges There is a small circle like this one. Like a gear icon, when you click on here, it says you can enable so many columns as well. Right now this column is enabled up to reference If you say how many bytes have been sent to this interface, give a description of this interface The error link state determines the role of this interface packet security mode. VLAN ID: VRP zone You can apply those and it will come up here, so this much bite has been sent to this interface link This interface's status: some interfaces are down. This is the Mac address for this interface's media access control addresses. How many packets are invited, and how many are in a packet? Because we did not assign any role to this interface, the role is unidentified. Suppose I want to go to and change the role, so this is the role. Suppose I want to give them the lead role, so if you go here, the role is now land and security mode. We'll do it later, so it's not showing anything, so I enable a lot of things other than what you need if you click the small gear icon. If you just need the default one, click here to reset the table, and when you click here you will see everything is gone. Now again up to reference so don't worry youcan enable and you can reset them any time. And this one is best for fitting all columns; suppose there are so many spaces here; you say no, just fit them so it does not adjust them okay, so you can enable so many columns with this thing. The tick mark show is enable and theone which is without techMARK is not enable. Now there is a create new wewill go to that one later on. But here is the edit button you can edit thislane interface by clicking this edit interface it will takeyou here to configure like alias, type, role et cetera detail, cancel, and it will come up here beside edit. You can right click on this one and thereis a pencil I can edit to edit again. So there are two ways to edit the third method to edit any interface, and if you spot the firewall, just double-click on it. So there are three methods now that wecan configure any interface delete is highlighted grayedout the reason is these are physical interfaceswhich we cannot delete them. But if you want, if you have virtual interfaces, you can delete them using this delete command above. There is a list of the interfaces that are selected. The one that, say, if I turn, will be here is now here; this is being selected; if I say this one, it is now selected; if I sell land, it will grow larger; and now two is written in bold to show you the week interface you have chosen. So it's clear, and you can search in the search bar; for example, if you say lane, anything beginning with lane will bring you here. Assume that anything I say is a port, because all of these are ports. It will select a port, and you can clear from here. So search is very helpful ifyou want to set something quickly. And the last one here is group by type All of these interfaces are showing and not in order; it's up to you and which other unit group by type; so these are the types like land management is showing like this one showing you by type if you say by role, so there is only one role, which we assign length to and which is unidentified; only one was in the land; the rest were unidentified; so that's why all of the interfaces are showing, nine and one interface and lane; Because we are using only three interfaces. So it's showing you by that status and group by zone. Because we did not create a dead zone, nothing else will appear and there will be no grouping; okay, it was a deferred one, so there is now no grouping and it is showing you anything. Also you can use this filter. There is a small filter. This one is the search filter, and this one is a group filter by name. If you click here, they know I want to group by vin and apply, so it only shows you how to clear the filter. There is a remove button, so it removes There is a type again a filter again you cando by because we have only physical interfaces, we cando it by physical interface filter member we don't havemember by IP you can filter anything. Starting from one, one, two, filter it. So only this interface is filtered by this one. If you want to clear it, remove the filter. There is an administrative access filter, a DHCP filter, and an individual filter. And also if you click on name so by nameit will do again click so it will do it By type, all are physical according to IP. So now everything starts at zero again. Click to start from IP, and it will do it by that range as well. Okay, anything here has a refresh button to refresh anything by now (30 seconds or 1 minute). You can do it that way. The last thing is that there is a button for "create new" so you can create new interfaces. because these are physical interfaces. And I told you, we can create logical interfaces as well. So, after clicking "create new," there are interfaces zone, virtual V wire, and 40 WiFi extender. We don't need or feel required to do that one. I'll show you how to connect up to 48 firewalls; the concept has been rewired. Yeah, the name was V-wire, like a joint, like a bridge, or something, so you can use virtual V-wire zones, which we will discuss in detail. You can create zones to group things. Okay? And there is an interface. So let's first go to interfaces. So this is the interfaces, logical interfaces notthe physical which I click and came here. So, let's say you want to give them any name you want, okay, let's say VLAN tenalias is any name you can give them. And these are the types of interfaces that you can create. The first is its two ad aggregation loop interface, redundant interface software switch VLAN, and WiFi. We don't want to discuss WiFi, so let's discuss this one. The first one was VLAN. We can create a VLAN-virtual VLAN interface. This one so VLAN we know virtuallocal area network to divide a hugebroadcast domain and a small aggregate part. We call them villains if you want to like them and switch environments. I'll say if you want a large broadcast, say 500 students, and you want to create a small station session A, session B, and section C, so this is Car Villa and I won't go into detail. In detail. There are so many VLAN ways to create houses, and then we use them for segregate division and small broadcast domain, so we use VLAN for that purpose, and the same thing we can do here, which you discuss in so many courses by the way, is loop interface. A loop interface is basically like a logical interface. We normally use logical interfaces and BGP for pairing and management purposes, and we use lubricant interfaces because it's not down even if your physical interface is down but your logical interface is still up, so in BGP and OSPF we use them for management purposes in this protocol and for anything else we can use. Also in VPN we are using loopbake interfacesside to side, VPN and other for testingwe are also using loopbake interfaces. Remember that there are so many loopback items in Windows that I just showed you inventory. I have a new big interface; there is a Lubric Tester as well; and there are LubricIPs as well, so don't confuse yourself. Lubake has a Lubake tester whenever we want to check anything, and you don't have a PC, so you can create a new bank tester like this one, this one for the fiberoptic, and there should be one for RJ-45 as well. So let me type RJ 45 either way; it's a loop, which means it's returning; it's making a loop so you can test whether or not the interface or the switch interface is working. So instead of bringing your PC and plugging one in and another in, we just plug if it is green; that means the interface is working. So this one we also call a Lubric and windowwhere we can create a lube break interface the onewhich I created and I use for test purpose. In this interface either you use them or not, itwill be up for all the time because I'm notconnected virtually is down because I'm not connected, my localinterface is down, I'm not connected through Bro but thelubric is up, I'm not using it even if youare not using it will be up. So this is Lubric adapter you can create hereas well and there is a Lubric IP aswell which we are using 127 for test purpose. Okay. So pink Lubic's response is heading my way. My protocol is working and my interface is okay. We can use Lubric for test purpose whichis IP 127 two two five as well. Which is colon 1, and how many lubricating things can we create a loop in FortiGate Firewall? Not in Cisco essay, Cisco switch, Cisco outer, and so many other places, and not even in Paul to firewall in any other firewall. So this is a logical interface, which we can create for many other purposes. Then there is a redundant interface whenyou see when we come here. So this is one redundant interface. So we done lubric we done VLANnow there is a redundant interface. What is a redundant interface? Basically if you want a redundancy high availability that ifone interface is down the other has to start workas a backup so then you can use a renderedinterface, keep in mind render interface both the interfaces eithermore than two interfaces will not work at the sametime only one interface will work and until now thatinterface is working, the other will not work. This is the difference between redundant and aggregate interface, keepin mind so redundant means suppose if I do twointerfaces, one will work and the other will like abackup like a standby, it will not work. So when the first interface is down, the other will start working like a failure. So we can use residential interfaces, we can use redundant interfaces as well if we need something like this, and now there is this one aggregate as well, so what is an aggregate? Now there is a differencebetween redundant and aggregate. Aggregate is the link aggregation protocol, you know. LACP, which we use, and Cisco switches will combine multiple interfaces, but logically it will be one, and all interfaces will function as they do now. It will bind. It logically unites them. It will combine the links. It's not like redundant interfaces, and we use link aggregation control protocol in switches. We call them ether channels because one side configures the ether channel and the other side aggregates the interfaces, which means you configure the LACP link aggregation control protocol, but these will be logic. not a logical interface. It will be a physical interface, and all the interfaces will belong to one domain. not a separate thing, then you can combine them and aggregate them, so this is an aggregate interface Also, there is another interface if I click on another; suppose I go to any interface; suppose port 4 is double-clicked to edit; or click here There is one arm sniffer I want to combine two interface types on this one as well as one arm Snipper, what is an arm snipper? We discuss tape mode, sorry in switch to switch, we call them tape modes, and if you remember like IDs when configuring your firewall, they work like a log segregator to see the reporting. to see the audit. To see the logs same concept is here one arm snifferif you want to use your 40 days per wall asa sniffer the logs will come and you will see andyou can capture as well and you can see the logsas well which we turn in firewall to firewall as wellwe call them tape mode to configure to redirect the trafficfrom monitoring as well like we use ancisco switch to monitorsomething so here we call them one arm sniffer okay. So this one is also done. So these are the interface types that we can configure, okay? And from here we can checkthe interfaces from network and interfaces. So we will do two, three different topologies to see different things, like a villain one, a snipper one, an aggregate one, or anything else. If you want to do all three, we will do all three so that you get an idea of how we can configure the interfaces in different modes. So now that we know this basic thing, let's interface-show these things from top to bottom. Now we get an idea of how these things are working, and then from here we see the interfaces, which are the same thing. We can create a zone to combine this zone, which is not like the other one. Let me go to zone and show you what I wrote here basically for grouping: Suppose you have so many VLANs that you created, which means if you created five VLANs, you will create five different policies to apply rules to each VLAN. So rather than creating five policies, why not combine all the VLANs into one zone, so logically it will become one? So whenever you want to apply policy, it will be applied to one zone and will be inherited by all VLANs. So this method, which we call zones, simplifies your policy configuration. Your management. Your creation of policy means everything will be visible clearly when you use the zones Keep in mind that zone and FortiGate firewalls are not the same as zone in Palo Alto firewalls; we discussed zone as being distinct there, but zone is distinct here. It's combining basically same interfaces like in one grouplike in this one so I combine villain one. Two. Four in zone, then I create another zone for two, three, assume, and I create a new zone, so the policy is combined, but keep in mind that you cannot apply anything individually than unwilling one. So, first, you must decide whether you want to go ingrouping or not. If you do not want to join the group, imagine yourself as a team; we need someone working in an office as a team, so you cannot do anything without team permission. You have to follow whatever they say is the combined whenthey say we want to resign from the company altogether becausethey don't want to give us the salary then you haveto go with them because I have a family there andthen don't go to team member so zone is the samething when you enter the zone then either you have toremove the zone to separate all the villain and either youhave to be in one zone to whatever apply on thezone it will be inherited to you. So we can do zones as well here, and here we can create, which we will do anyway. So in interface, we discuss interface and different types, then we create a zone, and virtual rewire is already the same thing, and we want to break something. There will be no IP requirement; it's the same. like a V wire and parallel to the firewall. Same concept. Okay, so that's done. These are the interface-related related stuff.Let's do some labelling related to this one. So let me close.

Go to testing centre with ease on our mind when you use Fortinet NSE4_FGT-6.4 vce exam dumps, practice test questions and answers. Fortinet NSE4_FGT-6.4 Fortinet NSE 4 - FortiOS 6.4 certification practice test questions and answers, study guide, exam dumps and video training course in vce format to help you study with ease. Prepare with confidence and study using Fortinet NSE4_FGT-6.4 exam dumps & practice test questions and answers vce from ExamCollection.