300-730 · Question #10
What is a requirement for smart tunnels to function properly?
The correct answer is A. Java or ActiveX must be enabled on the client machine. Smart tunnels require Java or ActiveX to be enabled in the browser because these plugins perform the socket-level TCP redirection that the feature depends on.
Question
Options
- AJava or ActiveX must be enabled on the client machine.
- BApplications must use UDP.
- CStateful failover must not be configured.
- DThe user on the client machine must have admin access.
How the community answered
(44 responses)- A91% (40)
- B2% (1)
- C2% (1)
- D5% (2)
Why each option
Smart tunnels require Java or ActiveX to be enabled in the browser because these plugins perform the socket-level TCP redirection that the feature depends on.
Smart tunnels on Cisco ASA WebVPN rely on ActiveX (for Internet Explorer on Windows) or Java (for other browsers and platforms) to intercept and redirect TCP socket calls from applications through the SSL VPN session. Without one of these browser plugin technologies enabled, the client-side component that creates the application tunnel cannot load or execute. This browser dependency is a fundamental architectural requirement of the smart tunnel feature.
Smart tunnels support only TCP-based applications; UDP traffic is not supported and must use other VPN methods such as full tunnel AnyConnect.
Stateful failover is an ASA high-availability feature unrelated to whether smart tunnels can be established on a client machine.
Administrative access on the client machine is not required for smart tunnels, which is actually a key benefit distinguishing them from port forwarding that may require elevated privileges.
Concept tested: Cisco ASA WebVPN smart tunnel client requirements
Source: https://www.cisco.com/c/en/us/td/docs/security/asa/asa-cli-reference/S/asa-command-ref-S/sm-sz-commands.html
Topics
Community Discussion
No community discussion yet for this question.