300-730 SVPN: Implementing Secure Solutions with Virtual Private Networks

Question

Question Image

Refer to the exhibit. A user is connecting from behind a PC with a private IP address. Their ISP is blocking TCP port 443. Which AnyConnect XML configuration will allow the user to establish a connection with the ASA?

Explanation

The ASA is reached at public address 209.165.202.129. Setting PrimaryProtocol to IPsec makes AnyConnect use IKEv2/IPsec instead of the default SSL protocol, so the connection does not rely on blocked TCP port 443. StandardAuthenticationOnly set to false retains the default AnyConnect EAP authentication behavior.

Learn more

Cisco Secure Client Administrator Guide—Profile Editor

300-730 SVPN: Implementing Secure Solutions with Virtual Private Networks

AstroTutor

Notes

Readiness

QuestionQ14

Community Discussion