nerdexam
Fortinet

NSE4 · Question #321

A company needs to provide SSL VPN access to two user groups. The company also needs to display different welcome messages on the SSL VPN login screen for both user groups. What is required in the…

The correct answer is B. Different SSL VPN realms for each group. To provide different welcome messages and access for distinct SSL VPN user groups, configuring separate SSL VPN realms for each group is the required solution.

Submitted by yuki_2020· Apr 18, 2026VPN and Routing

Question

A company needs to provide SSL VPN access to two user groups. The company also needs to display different welcome messages on the SSL VPN login screen for both user groups. What is required in the SSL VPN configuration to meet these requirements?

Exhibit

NSE4 question #321 exhibit

Options

  • ATwo separated SSL VPNs in different interfaces of the same VDOM
  • BDifferent SSL VPN realms for each group
  • CDifferent virtual SSLVPN IP addresses for each group
  • DTwo firewall policies with different captive portals

How the community answered

(36 responses)
  • A
    3% (1)
  • B
    86% (31)
  • C
    3% (1)
  • D
    8% (3)

Why each option

To provide different welcome messages and access for distinct SSL VPN user groups, configuring separate SSL VPN realms for each group is the required solution.

ATwo separated SSL VPNs in different interfaces of the same VDOM

While technically possible to have multiple SSL VPNs, requiring two entirely separate SSL VPN configurations on different interfaces is an inefficient way to achieve different welcome messages for user groups.

BDifferent SSL VPN realms for each groupCorrect

SSL VPN realms allow for segregation of user groups and enable the configuration of different login portals, including unique welcome messages and portal designs, along with specific access rights.

CDifferent virtual SSLVPN IP addresses for each group

Different virtual SSLVPN IP addresses are assigned to users after successful authentication and do not directly control the welcome message displayed on the login screen.

DTwo firewall policies with different captive portals

Captive portals are typically used for guest network access or firewall authentication, not for customizing SSL VPN login screens for specific user groups.

Concept tested: FortiGate SSL VPN realms

Source: https://docs.fortinet.com/document/fortigate/7.4.0/administration-guide/990610/customizing-the-ssl-vpn-login-page

Topics

#SSL VPN#VPN Realms#User Authentication#FortiGate Configuration

Community Discussion

No community discussion yet for this question.

Full NSE4 Practice