NSE 4 – FortiGate 6.2 — Question 105

Which two statements about SSL VPN timers are true? (Choose two.)

Answer options

• A. SSL VPN settings do not have customizable timers.
• B. SSL VPN timers prevent SSL VPN users from being logged out because of high network latency.
• C. SSL VPN timers disconnect idle SSL VPN users when a firewall policy authentication timeout occurs.
• D. SSL VPN timers allow to mitigate DoS attacks from partial HTTP requests.

Correct answer: B, D

Explanation

Option B is correct because SSL VPN timers are designed to prevent disconnections caused by network latency issues. Option D is also correct, as these timers can help mitigate Denial of Service attacks by managing how requests are processed. Options A and C are incorrect since SSL VPN does allow for customizable timers and C does not accurately reflect the function of SSL VPN timers in relation to idle users.