nerdexam
Fortinet

NSE4_FGT-7.0 · Question #76

Which of the following statements is true regarding SSL VPN settings for an SSL VPN portal?

The correct answer is D. By default, the admin GUI and SSL VPN portal use the same HTTPS port. By default, the FortiGate administrative GUI and the SSL VPN portal share the same HTTPS port for access, streamlining configuration and often using the standard HTTPS port 443.

VPN

Question

Which of the following statements is true regarding SSL VPN settings for an SSL VPN portal?

Options

  • ABy default, FortiGate uses WINS servers to resolve names.
  • BBy default, the SSL VPN portal requires the installation of a client's certificate.
  • CBy default, split tunneling is enabled.
  • DBy default, the admin GUI and SSL VPN portal use the same HTTPS port.

How the community answered

(60 responses)
  • A
    2% (1)
  • B
    2% (1)
  • C
    3% (2)
  • D
    93% (56)

Why each option

By default, the FortiGate administrative GUI and the SSL VPN portal share the same HTTPS port for access, streamlining configuration and often using the standard HTTPS port 443.

ABy default, FortiGate uses WINS servers to resolve names.

FortiGate primarily uses DNS servers for name resolution by default; WINS is a legacy name resolution service mainly used in older Windows environments and is not the default for FortiGate.

BBy default, the SSL VPN portal requires the installation of a client's certificate.

By default, SSL VPN portals do not require client certificates for authentication; user authentication typically relies on usernames and passwords, with client certificates being an optional, advanced security feature.

CBy default, split tunneling is enabled.

By default, split tunneling is typically disabled or set to full tunnel, meaning all traffic goes through the VPN, which is generally more secure; enabling split tunneling requires explicit configuration.

DBy default, the admin GUI and SSL VPN portal use the same HTTPS port.Correct

By default, the FortiGate's administrative HTTPS GUI and the SSL VPN portal are configured to listen on the same port (typically 443) on the external interface, allowing a single public IP and port to be used for both services, distinguished by the URL path. This is a common default configuration for FortiGate devices.

Concept tested: FortiGate SSL VPN and admin GUI default port

Source: https://docs.fortinet.com/document/fortigate/7.4.0/administration-guide/447264/ssl-vpn-port-settings

Topics

#SSL VPN portal#Default settings#Split tunneling

Community Discussion

No community discussion yet for this question.

Full NSE4_FGT-7.0 Practice