NSE4 · Question #321
A company needs to provide SSL VPN access to two user groups. The company also needs to display different welcome messages on the SSL VPN login screen for both user groups. What is required in the…
The correct answer is B. Different SSL VPN realms for each group. To provide different welcome messages and access for distinct SSL VPN user groups, configuring separate SSL VPN realms for each group is the required solution.
Question
A company needs to provide SSL VPN access to two user groups. The company also needs to display different welcome messages on the SSL VPN login screen for both user groups. What is required in the SSL VPN configuration to meet these requirements?
Exhibit
Options
- ATwo separated SSL VPNs in different interfaces of the same VDOM
- BDifferent SSL VPN realms for each group
- CDifferent virtual SSLVPN IP addresses for each group
- DTwo firewall policies with different captive portals
How the community answered
(36 responses)- A3% (1)
- B86% (31)
- C3% (1)
- D8% (3)
Why each option
To provide different welcome messages and access for distinct SSL VPN user groups, configuring separate SSL VPN realms for each group is the required solution.
While technically possible to have multiple SSL VPNs, requiring two entirely separate SSL VPN configurations on different interfaces is an inefficient way to achieve different welcome messages for user groups.
SSL VPN realms allow for segregation of user groups and enable the configuration of different login portals, including unique welcome messages and portal designs, along with specific access rights.
Different virtual SSLVPN IP addresses are assigned to users after successful authentication and do not directly control the welcome message displayed on the login screen.
Captive portals are typically used for guest network access or firewall authentication, not for customizing SSL VPN login screens for specific user groups.
Concept tested: FortiGate SSL VPN realms
Source: https://docs.fortinet.com/document/fortigate/7.4.0/administration-guide/990610/customizing-the-ssl-vpn-login-page
Topics
Community Discussion
No community discussion yet for this question.
