NSE4 · Question #265
The Host Check feature can be enabled on the FortiGate unit for SSL VPN connections. When this feature is enabled, the FortiGate unit probes the remote host computer to verify that it is "safe"…
The correct answer is B. Microsoft Windows Firewall software. FortiGate's SSL VPN Host Check feature can verify the presence and status of endpoint security software, but 'Microsoft Windows Firewall software' is not a distinct configurable option like specific security products.
Question
The Host Check feature can be enabled on the FortiGate unit for SSL VPN connections. When this feature is enabled, the FortiGate unit probes the remote host computer to verify that it is "safe" before access is granted. Which of the following items is NOT an option as part of the Host Check feature?
Options
- AFortiClient Antivirus software
- BMicrosoft Windows Firewall software
- CFortiClient Firewall software
- DThird-party Antivirus software
How the community answered
(34 responses)- A6% (2)
- B91% (31)
- D3% (1)
Why each option
FortiGate's SSL VPN Host Check feature can verify the presence and status of endpoint security software, but 'Microsoft Windows Firewall software' is not a distinct configurable option like specific security products.
FortiClient Antivirus software is a valid component that the Host Check feature can verify.
While FortiGate Host Check can verify the status of the Windows Firewall through Windows Security Center, it does not offer 'Microsoft Windows Firewall software' as a discrete selectable option in the same manner it offers checks for specific endpoint security products like FortiClient Antivirus software, FortiClient Firewall software, or third-party antivirus solutions.
FortiClient Firewall software is a valid component that the Host Check feature can verify.
Third-party Antivirus software is a valid category that the Host Check feature can verify.
Concept tested: FortiGate SSL VPN Host Check Capabilities
Source: https://docs.fortinet.com/document/fortigate/7.4.0/administration-guide/603348/host-check
Topics
Community Discussion
No community discussion yet for this question.