View all questions & answers for the FCSS - FortiSASE 24 Administrator Exam Materials exam

FCSS - FortiSASE 24 Administrator Exam Materials - Question #13 Discussion

Comment Image Comment Image Comment Image
Question Diagram

A FortiSASE administrator is trying to configure FortiSASE as a spoke to a FortiGate hub. The VPN tunnel does not establish. Based on the provided configuration, what configuration needs to be modified to bring the tunnel up? (Choose one answer)

  • A. FortiSASE spoke devices do not support mode config.
  • B. The hub needs IKEv2 enabled in the IPsec phase 1 settings.
  • C. NAT needs to be enabled in the Spoke-to-Hub firewall policy.
  • D. The BGP router ID needs to match on the hub and FortiSASE.
Correct Answer: B

Brave-Dump Community Votes

Answer: B (2 votes) 100%

Community Explanations & Comments (2)

Abdelrahman Ahmed 1 year ago
Selected: B
B is correct
Soroush Enayatiheris 1 year ago
Selected: B
IKE V2 is only mode support in this process.