Lab policy uses set nat enable and set ippool enable but names the wrong existing pool. The partner rejects the observed source, while routing and authorization work. Which change directly fits the evidence?

Choose the single best answer.

A.Disable all firewall logging
B.Increase the client ephemeral source port
C.Add a reverse permit for established replies
D.Select the intended pool with poolname

Show the answer and explanation

✓ Correct answer

Select the intended pool with poolname

The selected pool controls the public source presented by this policy. Logging, arbitrary client ports and reverse authorization do not correct a wrong translated identity.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material, independently created and unaffiliated with Fortinet. Questions are original practice items, not recalled exam content. Published-topic coverage does not guarantee examination success. FortiOS baseline is 7.6.0; independently versioned FortiSASE and CNF references are qualified where relevant.