Fortinet Network Security Expert 4 Written (400) Set 1

Only digital certificates will be accepted as an authentication method in phase 1. Dialup clients must provide a username and password for authentication. Phase 1 negotiations will skip pre-shared key exchange. Dialup clients must provide their local ID during phase 2 negotiations.

Kernel Antivirus engine IPS engine Application control engine

Converts DNS A record lookups to AAAA record lookups. Translates the destination IPv6 address of the DNS traffic to an IPv4 address. Synthesizes DNS AAAA records from A records. Translates the destination IPv4 address of the DNS traffic to an IPv6 address.

It refreshes user group information form any servers connected to the FortiGate using a collector agent. It refreshes all users learned through agentless polling. It displays status information and some statistics related with the polls done by FortiGate on each DC. It enables agentless polling mode real-time debug.

The FortiGate is able to handle NATed connections only with aggressive mode. FortiClient supports aggressive mode. The remote peers are able to provide their peer IDs in the first message with aggressive mode. Main mode does not support XAuth for user authentication.