You are analyzing connectivity problems caused by intermediate devices blocking traffic in SSL VPN environment.

Fortinet FCP_FGT_AD-7.6 Question Answer

In which two ways can you effectively resolve the problem? (Choose two.)

You can turn off IKE fragmentation to fix large certificate negotiation problems.

You should use IPsec to solve issues with fragment drops and large certificate exchanges.

You can use SSL VPN tunnel mode to prevent problems with blocked ESP and UDP ports (500 or 4500).

You can configure a hub-and-spoke topology with SSL VPN tunnels to bypass blocked UDP ports.

FCP_FGT_AD-7.6 PDF/Engine

Get 65% Discount on All Products, Use Coupon: "ac4s65"