Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
Fortinet Certified Professional: FortiGate / FortiOS 7.6 Administrator · Fortinet
Select 2 answers.
This question asks for 2 answers, but our data marks only 1. Compare with the community discussion below for the full answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
I think there is a misunderstanding, in my lab, fortigate client doesn't have any client certificate, instead, it is compulsory the installation of a CA certificate on fortigate FW. Indeed, if we analyzed the following statement at FortiGate Infrastructure 7.2 Study Guide (p.200): "This configuration requires proper CA certificate installation as the SSL VPN client FortiGate/user uses PSK and a PKI client certificate to authenticate. The FortiGate devices must have the proper CA certificate installed to verify the certificate chain to the root CA that signed the certificate." The sentence say it necessary to install a certificate since the client use PSK and PKI but clearly on the server "must have the proper CA certificate installed", be careful. It say the client uses PSK, which is a pre-shared key and it is the public key normally contained in the certificate exposed by the server. As I said in my lab works perfectly without certificate at client side.
I think there is a misunderstanding, in my lab, fortigate client doesn't have any client certificate, instead, it is compulsory the installation of a CA certificate on fortigate FW. Indeed, if we analyzed the following statement at FortiGate Infrastructure 7.2 Study Guide (p.200): "This configuration requires proper CA certificate installation as the SSL VPN client FortiGate/user uses PSK and a PKI client certificate to authenticate. The FortiGate devices must have the proper CA certificate installed to verify the certificate chain to the root CA that signed the certificate." The sentence say it necessary to install a certificate since the client use PSK and PKI but clearly on the server "must have the proper CA certificate installed", be careful. It say the client uses PSK, which is a pre-shared key and it is the public key normally contained in the certificate exposed by the server. As I said in my lab works perfectly without certificate at client side.
Please remove this comment, I made wrong answer selection.