Refer to the exhibit.
A network administrator is troubleshooting an IPsec tunnel between two FortiGate devices. The administrator has determined that phase 1 status is up, but phase 2 fails to come up.
Based on the phase 2 configuration shown in the exhibit, which configuration change will bring phase 2 up?

Question

Refer to the exhibit.A network administrator is troubleshooting an IPsec tunnel between two FortiGate devices. The administrator has determined that phase 1 status is up, but phase 2 fails to come up.Based on the phase 2 configuration shown in the exhibit, which configuration change will bring phase 2 up?

Karsten Heimers · Accepted Answer

On HQ-FortiGate, set Encryption to AES256.

Karsten Heimers · Answer

On Remote-FortiGate, set Seconds to 43200.

Karsten Heimers · Answer

On HQ-FortiGate, enable Diffie-Hellman Group 2.

Karsten Heimers · Answer

On HQ-FortiGate, enable Auto-negotiate.

Question list

List of questions

Question 1

(0)

Question 2

(0)

Question 3

(0)

Question 4

(0)

Question 5

(0)

Question 6

(0)

Question 7

(0)

Question 8

(0)

Question 9

(0)

Question 10

(0)

Related questions

Question 172 - NSE4_FGT-7.2 discussion

Suggested answer: B

0 comments