StudyToCert

All certifications / FortiGate Admin / Lessons

Fortinet NSE 4 - FortiOS 7.6 Administrator NSE4_FGT_AD-7.6 · Domain 5: VPN

IPsec basics: IKEv1 vs IKEv2, phase 1 and phase 2, proposals, DH groups, PFS, UDP 500/4500 and NAT-T

▶ Watch the overview video

Last reviewed September 25, 2026 · Leer en español

IPsec builds encrypted tunnels between sites over the untrusted Internet. FortiGate negotiates these tunnels with the Internet Key Exchange (IKE) protocol in two phases, and the exam tests the phases, the parameters that must match, and the ports involved.

Free account

Keep reading for free

Create a free StudyToCert account to read the rest of this lesson: 6 more sections, 4 key terms, a real-world example, an exam tip and self-check questions. Every lesson, lab and practice test is free with an account.

Sign up free Log in

Study FortiGate Admin for free
A week-by-week plan with every lesson, quizzes, checkpoint tests, a practice exam and hands-on labs.
Open the FortiGate Admin study plan