An administrator is creating an IPsec site-to-site VPN between his corporate office and branch office. Both offices are protected by Check Point Security Gateway managed by the same Security Management Server (SMS). While configuring the VPN community to specify the pre-shared secret, the administrator did not find a box to input the pre-shared secret. Why does it not allow him to specify the pre-shared secret?

Question

Quizplus · Accepted Answer

When both Security Gateways are managed by the same Security Management Server, certificate-based authentication is used by default, and there is no need to manually configure a pre-shared secret.

An Administrator Is Creating an IPsec Site-To-Site VPN Between His