NSE4 · Question #424
Which statement best describes what SSL.root is?
The correct answer is B. The name of a virtual interface in the root VDOM where all the SSL VPN user traffic comes. SSL.root is a special virtual interface within a FortiGate's root VDOM that acts as the ingress point for all traffic originating from SSL VPN users.
Question
Which statement best describes what SSL.root is?
Options
- AThe name of the virtual network adapter required in each user's PC for SSL VPN Tunnel mode.
- BThe name of a virtual interface in the root VDOM where all the SSL VPN user traffic comes
- CA Firewall Address object that contains the IP addresses assigned to SSL VPN users.
- DThe virtual interface in the root VDOM that the remote SSL VPN tunnels connect to.
How the community answered
(37 responses)- A5% (2)
- B92% (34)
- D3% (1)
Why each option
SSL.root is a special virtual interface within a FortiGate's root VDOM that acts as the ingress point for all traffic originating from SSL VPN users.
The virtual network adapter for SSL VPN Tunnel mode is installed on the end-user's PC, not named `ssl.root` which is a FortiGate-side interface.
`ssl.root` is a reserved virtual interface in the FortiGate's root VDOM, serving as the logical interface where all traffic from connected SSL VPN clients (regardless of access mode) is received before being subjected to firewall policies and routing decisions.
`ssl.root` is an interface itself, not a Firewall Address object; while SSL VPN user IPs can be grouped into address objects, `ssl.root` serves a different function.
While SSL VPN tunnels connect through it, `ssl.root` is more precisely the virtual interface *from which* the SSL VPN user traffic enters the firewall policy processing, rather than merely the connection point.
Concept tested: FortiGate SSL VPN ssl.root interface
Source: https://docs.fortinet.com/document/fortigate/7.4.0/administration-guide/339482/ssl-vpn
Topics
Community Discussion
No community discussion yet for this question.