proto_state=00: Indicates no traffic or a closed session.
proto_state=01: Typically indicates one-way ICMP traffic or a partially established TCP session.
proto_state=10: Indicates an established TCP session, where the session has completed the three-way handshake and both sides can send and receive data.
proto_state=11: Often indicates a fully established and active bidirectional session.
Explanation of correct answer:
proto_state=10is the correct indication for an established TCP session as it signifies that the session is fully established and active.
References
Fortinet Network Security 7.2 Support Engineer Documentation
Fortinet Firewall Protocol State Documentation
Contribute your Thoughts:
Chosen Answer:
This is a voting comment (?). You can switch to a simple comment. It is better to Upvote an existing comment if you don't have anything to add.
Submit