Fortinet Exam FCP_FGT_AD-7.6 Topic 3 Question 8 Discussion

Actual exam question for Fortinet's FCP_FGT_AD-7.6 exam

Question #: 8
Topic #: 3

[All FCP_FGT_AD-7.6 Questions]

You are analyzing connectivity problems caused by intermediate devices blocking traffic in SSL VPN environment.

In which two ways can you effectively resolve the problem? (Choose two.)

AYou can turn off IKE fragmentation to fix large certificate negotiation problems.

BYou should use IPsec to solve issues with fragment drops and large certificate exchanges.

CYou can use SSL VPN tunnel mode to prevent problems with blocked ESP and UDP ports (500 or 4500).

DYou can configure a hub-and-spoke topology with SSL VPN tunnels to bypass blocked UDP ports.

Show Suggested Answer

Suggested Answer: A, C

Disabling IKE fragmentation helps resolve issues caused by intermediate devices blocking large fragmented packets during certificate negotiation.

Using SSL VPN tunnel mode encapsulates traffic over HTTPS, bypassing blocks on ESP and UDP ports commonly used by IPsec.

by Micaela at Aug 02, 2025, 11:19 AM

Limited Time Offer

25%

17 days ago

I think options C and D are the way to go. Turning off IKE fragmentation won't help with large certificate issues, and IPsec isn't the right solution for an SSL VPN environment.

upvoted 0 times

Quinn

6 days ago

User 1: I agree, using SSL VPN tunnel mode can prevent blocked ESP and UDP ports.

upvoted 0 times

...