Refer to the exhibit. The sniffer log on two FortiGate devices are shown. Based on the information in the log, which two factors explain the output on FortiGate FGT-02?

Select an option, then click Submit answer.
Reference / correct answer:
A third-party device is blocking protocol 50.
Most accepted answer: D. A third-party device is blocking protocol 50.
Community votes: A=3, C=2, D=5
Selected Answer: AD Even without tunnel config on FGT-02 sniffer should show packets (not C). Sniffer is ok (not B) upvoted 5 times
Selected Answer: AD Page 502 — Problem 3: ISP Blocking ESP Packets shows the exact same pattern as this question: "The sniffer shows that the ESP packets from HQ-NGFW-2 are not arriving at BR-FGT-1. The most likely reason is that the ISP is blocking or dropping the ESP packets in transit." The exhibit on that page is structurally identical to this question: One FortiGate shows ESP going OUT only The other FortiGate shows no packets captured This directly confirms option D. For option A — if FGT-01 has the wrong remote peer IP configured, it is sending ESP packets to the wrong destination. FGT-02 (at the correct IP) would receive nothing, producing "no packets captured." This also explains why FGT-01 shows only outgoing ESP with no incoming replies — the traffic is going to the wrong peer, which doesn't respond back through FGT-01. upvoted 1 times 1d21e23 1 month ago If the wrong peer was configured on FGT-01, then how did FGT-01 get past IKE Phase 1 and 2 to be able to start sending ESP for a particular SA? upvoted 1 times ...
If the wrong peer was configured on FGT-01, then how did FGT-01 get past IKE Phase 1 and 2 to be able to start sending ESP for a particular SA? upvoted 1 times
Selected Answer: AD Even if the tunnel is not yet defined on the FGT-02, ESP packets arriving at the device’s interface can still be seen in the sniffer. It is not necessary for the SA to be established in order to view packets in the sniffer. upvoted 2 times
Selected Answer: CD there is no response from peer B A: may be (either A or C or both) B: wrong C: may be (either A or C or both) d: may be A,C and D are possible, as I have to choose 2 only I will go for CD upvoted 1 times