Refer to the exhibits.

Fortinet FCSS_SASE_AD-24 Question Answer

A FortiSASE administrator is trying to configure FortiSASE as a spoke to a FortiGate hub. The VPN tunnel does not establish

Based on the provided configuration, what configuration needs to be modified to bring the tunnel up?

NAT needs to be enabled in the Spoke-to-Hub firewall policy.

The BGP router ID needs to match on the hub and FortiSASE.

FortiSASE spoke devices do not support mode config.

The hub needs IKEv2 enabled in the IPsec phase 1 settings.

FCSS_SASE_AD-24 PDF/Engine

Get 60% Discount on All Products, Use Coupon: "8w52ceb345"