You are encountering connectivity problems caused by intermediate devices blocking IPsec traffic.

Fortinet FCP_FGT_AD-7.6 Question Answer

In which two ways can you effectively resolve the problem? (Choose two.)

You should use the protocol IKEv2.

You can use SSL VPN tunnel mode to prevent problems with blocked ESP and UDP ports (500 or 4500).

You can configure a hub-and-spoke topology with SSL VPN tunnels to bypass blocked UDP ports.

You can turn on fragmentation to fix large certificate negotiation problems.

FCP_FGT_AD-7.6 PDF/Engine

Get 70% Discount on All Products, Use Coupon: "coponace"