What configuration change must the administrator make if connectivity to a web server times out?

If connectivity to a web server is timing out, enabling arp-reply in the VIP configuration can be a crucial step. In a Virtual IP (VIP) configuration, enabling ARP replies ensures that the FortiGate unit responds to ARP requests for the virtual IP. If this feature is disabled, the FortiGate may not reply to ARP requests, leading to connectivity issues because devices trying to access the web server cannot resolve the IP address to a MAC address.

When communicating with a web server through a VIP, it’s vital that the ARP response is properly configured so that clients can reach the intended server. If ARP replies are not enabled, clients may not be able to find the web server at all, leading to timeouts as they try to access it without a valid MAC address to send their packets to.

Other options, while they might suggest changes to improve connectivity, do not specifically address the likely reason for the timeout connected to the VIP configuration and ARP behavior. Making arbitrary policy changes or disabling the firewall does not pinpoint the underlying ARP issue and could expose the network to additional risks or complexities, which is not advisable.