Final answer:
The mem-obj-reach option in a FortiGate device controls whether it drops or permits new connections when in memory conserve mode. When enabled, it drops new connections to preserve existing ones. If disabled, it continues to accept new connections, potentially risking system overload.
Step-by-step explanation:
The option that controls whether a FortiGate (FGT) drops or permits connections when it is in memory conserve mode is known as the mem-obj-reach option. This is a command in the system that determines how the FGT behaves when resources are limited.
When the device enters memory conserve mode due to low available memory, if the mem-obj-reach option is enabled, the FortiGate will drop new connections to preserve existing ones. However, if it is disabled, the FortiGate will continue to accept new connections, potentially at the risk of overloading the system.
This is a fundamental feature of the FortiGate's memory conservation strategy and is critical for network administrators to understand in order to protect against potential network disruptions.
Learn more about FGT Connection Control