Implementing Secure Solutions with Virtual Private Networks (SVPN) — Question 23

A network engineer must design a clientless VPN solution for a company. VPN users must be able to access several internal web servers. When reachability to those web servers was tested, it was found that one website is not being rewritten correctly by the ASA. What is a potential solution for this issue while still allowing it to be a clientless VPN setup?

Answer options

• A. Set up a smart tunnel with the IP address of the web server.
• B. Set up a NAT rule that translates the ASA public address to the web server private address on port 80.
• C. Set up Cisco AnyConnect with a split tunnel that has the IP address of the web server.
• D. Set up a WebACL to permit the IP address of the web server.

Correct answer: A

Explanation

The correct answer is A, as setting up a smart tunnel allows for the proper handling of web traffic without requiring a full VPN client. Options B and C introduce additional complexity and may not solve the rewriting issue, while option D does not address the rewriting problem directly.