NSE4_FGT-7.0 · Question #76
Which of the following statements is true regarding SSL VPN settings for an SSL VPN portal?
The correct answer is D. By default, the admin GUI and SSL VPN portal use the same HTTPS port. By default, the FortiGate administrative GUI and the SSL VPN portal share the same HTTPS port for access, streamlining configuration and often using the standard HTTPS port 443.
Question
Which of the following statements is true regarding SSL VPN settings for an SSL VPN portal?
Options
- ABy default, FortiGate uses WINS servers to resolve names.
- BBy default, the SSL VPN portal requires the installation of a client's certificate.
- CBy default, split tunneling is enabled.
- DBy default, the admin GUI and SSL VPN portal use the same HTTPS port.
How the community answered
(60 responses)- A2% (1)
- B2% (1)
- C3% (2)
- D93% (56)
Why each option
By default, the FortiGate administrative GUI and the SSL VPN portal share the same HTTPS port for access, streamlining configuration and often using the standard HTTPS port 443.
FortiGate primarily uses DNS servers for name resolution by default; WINS is a legacy name resolution service mainly used in older Windows environments and is not the default for FortiGate.
By default, SSL VPN portals do not require client certificates for authentication; user authentication typically relies on usernames and passwords, with client certificates being an optional, advanced security feature.
By default, split tunneling is typically disabled or set to full tunnel, meaning all traffic goes through the VPN, which is generally more secure; enabling split tunneling requires explicit configuration.
By default, the FortiGate's administrative HTTPS GUI and the SSL VPN portal are configured to listen on the same port (typically 443) on the external interface, allowing a single public IP and port to be used for both services, distinguished by the URL path. This is a common default configuration for FortiGate devices.
Concept tested: FortiGate SSL VPN and admin GUI default port
Source: https://docs.fortinet.com/document/fortigate/7.4.0/administration-guide/447264/ssl-vpn-port-settings
Topics
Community Discussion
No community discussion yet for this question.