Which two items does an FGFM keepalive message include? (Choose two.)

The FortiGate Management Protocol (FGFM) keepalive message is a periodic heartbeat sent from a managed FortiGate to the FortiManager. Its primary purpose is to communicate the device's operational status. This message critically includes a checksum of the FortiGate's running configuration, which allows FortiManager to track the device's configuration status (e.g., Synchronized, Modified). It also contains status information about security databases, including the installed IPS and Antivirus engine/definition versions. This enables FortiManager to monitor the security posture and report if the device's protections are up-to-date.

B. FortiGate license information is generally static and is communicated during initial registration or less frequent status updates, not within every high-frequency keepalive message.

D. While FortiManager monitors a device's online status via keepalives, the specific uptime value is a less critical management metric compared to configuration and security posture information.

1. FortiManager Administration Guide 7.4.0

Page 19

Section: "FortiManager protocol (FGFM)".

"The FortiGate unit periodically sends a heartbeat

or keepalive

message to the FortiManager system to indicate that it is online. The message includes the FortiGate unit’s serial number

checksum of the configuration

and other status information." (This directly supports option C).

2. FortiManager Administration Guide 7.4.0

Page 230

Section: "Device Manager > Monitors > FortiGate Status".

This section describes the information displayed in the FortiGate Status monitor

which is populated by data from the managed devices. The "AV/IPS DB" column shows the status of the Antivirus and IPS databases. This information is sent periodically from the FortiGate to the FortiManager via the FGFM protocol

specifically within the status updates of the keepalive message. (This supports option A).