The study guide for NSE 5 states that the IPS Admin Profile in Read Only mode can
1) Read but not edit or install IPS Objects
2) Install firewall policies without installing IPS-related objects
3) Assign profiles in the policy package
I'm pretty confused about 2 and 3.
For 2, the administrator cannot modify firewall policies, but they can install them? And they can't install IPS related objects? Does this mean that they can't install a firewall policy if it has an IPS object referenced in it?
For 3, if the administrator assigns a profile to a policy in the package, can they install this package?
I feel like the documentation isn't that clear
Nominating a forum post submits a request to create a new Knowledge Article based on the forum post topic. Please ensure your nomination includes a solution within the reply.
Hi,
The IPS admin is a restricted admin, you can give him the permission to install IPS sensors and NOT policy packages
please check the link below from the Admin guide
Ok. So the IPS admin can install IPS sensors when they have Read/Write privileges.
What about when they have Read Only? Point 2 says they can "install firewall policies without installing IPS related objects", and "assign profiles in the policy package". I'm not sure what these mean. What does it mean by "install firewall policies without installing IPS related objects" and "assign profiles in the policy package"?
it seems that this slide needs to be reviewed, the Admin guide is more accurate
How does this occur? Am I able to raise a ticket to have the training modified to be more accurate?
Select Forum Responses to become Knowledge Articles!
Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.
User | Count |
---|---|
1547 | |
1031 | |
749 | |
443 | |
210 |
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2024 Fortinet, Inc. All Rights Reserved.