Fortinet
NSE4_FGT_AD-7.6 · Question #9
You are analyzing connectivity problems caused by intermediate devices blocking traffic in SSL VPN environment. In which two ways can you effectively resolve the problem? (Choose two.)
The correct answer is C. You can use SSL VPN tunnel mode to prevent problems with blocked ESP and UDP ports (500 or 4500). D. You can configure a hub-and-spoke topology with SSL VPN tunnels to bypass blocked UDP ports. You've hit your limit · resets 5am (America/New_York)
VPN
Question
You are analyzing connectivity problems caused by intermediate devices blocking traffic in SSL VPN environment. In which two ways can you effectively resolve the problem? (Choose two.)
Options
- AYou can turn off IKE fragmentation to fix large certificate negotiation problems.
- BYou should use IPsec to solve issues with fragment drops and large certificate exchanges.
- CYou can use SSL VPN tunnel mode to prevent problems with blocked ESP and UDP ports (500 or 4500).
- DYou can configure a hub-and-spoke topology with SSL VPN tunnels to bypass blocked UDP ports.
How the community answered
(48 responses)- A13% (6)
- B6% (3)
- C81% (39)
Explanation
You've hit your limit · resets 5am (America/New_York)
Topics
#SSL VPN#DTLS#IPsec#fragmentation
Community Discussion
No community discussion yet for this question.