The global firewall authentication duration is 5 minutes, but the applicable user group has an explicitly configured authtimeout. What should be inspected before predicting expiry?

Choose the single best answer.

A.Use only the global duration and ignore the configured group override
B.Inspect the group override and global timeout type
C.Assume every user group resets the timer on creation of each new session
D.Use the TCP session timeout as the firewall authentication duration

Show the answer and explanation

✓ Correct answer

Inspect the group override and global timeout type

A configured group authtimeout can override the duration; the global timeout type governs the expiry behavior. Ignoring the override, treating new sessions as unconditional resets, or substituting a transport-session timer gives the wrong prediction.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material, independently created and unaffiliated with Fortinet. Questions are original practice items, not recalled exam content. Published-topic coverage does not guarantee examination success. FortiOS baseline is 7.6.0; independently versioned FortiSASE and CNF references are qualified where relevant.