The FortiGate can ping an internet IP. A LAN client has a correct gateway but its private source address exits WAN untranslated, and the ISP does not route that private subnet. Which change addresses this stated failure?

Choose the single best answer.

A.Renew the client's otherwise correct DHCP lease
B.Configure source NAT on the applicable client forwarding path
C.Enable ping in WAN allowaccess
D.Add the client to administrator trusted hosts

Show the answer and explanation

✓ Correct answer

Configure source NAT on the applicable client forwarding path

The client transit path needs source translation in this design. A FortiGate-originated ping tests another path; management settings and lease renewal cannot make the private address internet-routable.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material, independently created and unaffiliated with Fortinet. Questions are original practice items, not recalled exam content. Published-topic coverage does not guarantee examination success. FortiOS baseline is 7.6.0; independently versioned FortiSASE and CNF references are qualified where relevant.