Which two settings are required for SSL VPN to function between two FortiGate devices? (Choose two.)

Which two settings are required for SSL VPN to function between two FortiGate devices? (Choose two.)
A . The client FortiGate requires a manually added route to remote subnets.
B . The client FortiGate requires a client certificate signed by the CA on the server FortiGate.
C . The server FortiGate requires a CA certificate to verify the client FortiGate certificate.
D . The client FortiGate requires the SSL VPN tunnel interface type to connect SSL VPN.

View Answer

Answer: C,D

Explanation:

The FortiGate can be configured as an SSL VPN client, using an SSL-VPN Tunnel interface type. The FortiGates must have a proper CA certificate installed to verify the certificate chain to the root CA that signed the certificate.

C. The server FortiGate requires a CA certificate to verify the client FortiGate certificate:

When setting up SSL VPN between two FortiGate devices, the server FortiGate needs a CA (Certificate Authority) certificate to verify the client FortiGate’s certificate. This ensures that the client connecting to the VPN is authenticated and trusted.

D. The client FortiGate requires the SSL VPN tunnel interface type to connect SSL VPN:

For the SSL VPN to function, the client FortiGate needs to have the SSL VPN tunnel interface type configured. This interface type is specifically designed for SSL VPN connections, allowing the client FortiGate to establish the VPN tunnel with the server FortiGate.

These two settings together ensure that the SSL VPN connection between the two FortiGate devices is properly authenticated and established, allowing secure communication between them.