Refer to the exhibit, which shows the output of a diagnose command.

This is a pinhole session created to allow traffic for a protocol that requires additional sessions to operate through FortiGate.

This is an expected session created by the IPS engine.

Traffic in the original direction (coming from the IP address 10.171.121.38) will be routed to the next-hop IP address 10.200.1.1.

Traffic in the original direction (coming from the IP address 10.171.121.38) will be routed to the next-hop IP address 10.0.1.10.