Refer to the exhibit. Which VPN technology is permitted for users who connect to the Employee tunnel group?
The Employee connection profile inherits the default group policy, whose vpn-tunnel-protocol setting allows only ssl-clientless. Its webvpn-attributes also identify it as a clientless SSL VPN profile. AnyConnect is enabled globally, but it is not allowed by the inherited group policy for this profile. Cisco documents that permitted clientless or AnyConnect connections are controlled by the group-policy or username vpn-tunnel-protocol setting.
vpn-tunnel-protocol
ssl-clientless
webvpn-attributes
Community Discussion