HPE Aruba Certified Mobility Expert (ACMX) — Question 22

A VIA client tries to initially connect to corporate office controller through an intermediate firewall. However, the VPN connection fails. The administrator examines the firewall rules and determines that rules for UDP 4500 and UDP 500 are configured.
Which additional protocol must be allowed in the firewall rules to resolve this connection failure?

Answer options

• A. TCP 22
• B. TCP 443
• C. UDP 8200
• D. ESP

Correct answer: D

Explanation

The correct answer is D (ESP) because it is required for the encapsulated security payload in IPsec VPNs, which is essential for the secure transmission of data. The other options (TCP 22, TCP 443, and UDP 8200) are not related to the IPsec protocol and would not resolve the connection issue.