An administrator wants to simplify remote access without asking users to provide user credentials Which access control method provides this solution?

Zero Trust Network Access (ZTNA) with FortiClient is designed to provide seamless and secure access to applications without requiring users to re-enter credentials for each session. After the initial authentication and registration of FortiClient with EMS, access to protected resources is granted based on the device's identity, security posture, and ZTNA tags. This certificate-based trust model eliminates the need for repeated user credential prompts, simplifying the remote access experience compared to traditional VPNs that typically challenge for credentials upon connection.

B. SSL VPN typically requires users to provide credentials (username/password/token) each time they establish a connection, which does not meet the requirement.

C. L2TP, a traditional VPN protocol, also relies on user credentials for authentication and does not offer the seamless, credential-less access model described.

D. ZTNA IP/MAC filtering is a policy control feature used to restrict access based on source addresses, not the primary method for providing credential-less user authentication.

1. FortiGate ZTNA Deployment Guide 7.2, Page 6, "ZTNA versus VPN". The guide states, "With ZTNA, once a user is authenticated to the FortiClient, they can seamlessly and securely access applications without needing to authenticate again."

2. FortiClient EMS 7.2 Administration Guide, Page 243, "ZTNA". The documentation describes how ZTNA provides secure remote access based on an endpoint's identity and security posture.