Fortinet
NSE4_FGT_AD-7.6 · Question #44
You are encountering connectivity problems caused by intermediate devices blocking IPsec traffic. In which two ways can you effectively resolve the problem? (Choose two.)
The correct answer is A. You can use SSL VPN tunnel mode to prevent problems with blocked ESP and UDP ports (500 or 4500). B. You can configure a hub-and-spoke topology with SSL VPN tunnels to bypass blocked UDP ports. You've hit your limit · resets 5am (America/New_York)
VPN
Question
You are encountering connectivity problems caused by intermediate devices blocking IPsec traffic. In which two ways can you effectively resolve the problem? (Choose two.)
Options
- AYou can use SSL VPN tunnel mode to prevent problems with blocked ESP and UDP ports (500 or 4500).
- BYou can configure a hub-and-spoke topology with SSL VPN tunnels to bypass blocked UDP ports.
- CYou can turn on fragmentation to fix large certificate negotiation problems.
- DYou should use the protocol IKEv2.
How the community answered
(49 responses)- A71% (35)
- C10% (5)
- D18% (9)
Explanation
You've hit your limit · resets 5am (America/New_York)
Topics
#IPsec#NAT traversal#ESP#UDP encapsulation
Community Discussion
No community discussion yet for this question.