300-730 · Question #120
A user is experiencing delays on audio calls over a Cisco AnyConnect VPN. Which implementation step resolves this issue?
The correct answer is D. Enable DTLS.. Audio call delays over AnyConnect VPN are caused by TCP-based TLS overhead; enabling DTLS allows voice traffic to use UDP transport, eliminating retransmission-induced latency.
Question
Options
- AChange to 3DES Encryption.
- BShorten the encryption key lifetime.
- CInstall the Cisco AnyConnect 2.3 client for the user to download.
- DEnable DTLS.
How the community answered
(62 responses)- A2% (1)
- B2% (1)
- C5% (3)
- D92% (57)
Why each option
Audio call delays over AnyConnect VPN are caused by TCP-based TLS overhead; enabling DTLS allows voice traffic to use UDP transport, eliminating retransmission-induced latency.
3DES is a slower, more computationally expensive cipher than AES; switching to it would increase encryption processing time and worsen latency rather than improve it.
A shorter key lifetime triggers more frequent IKE rekeying events, adding periodic overhead to the tunnel rather than reducing audio delay.
AnyConnect 2.3 is an obsolete client version that predates modern DTLS optimizations and does not address the fundamental TCP-versus-UDP transport issue causing audio delays.
AnyConnect defaults to TLS over TCP for its tunnel, which introduces head-of-line blocking and retransmission delays that are especially harmful to real-time audio. DTLS (Datagram Transport Layer Security) uses UDP as its transport layer, providing the low-latency, loss-tolerant path that voice and video traffic requires. Enabling DTLS on the ASA headend and AnyConnect profile allows real-time media to bypass TCP overhead entirely.
Concept tested: Enabling DTLS on AnyConnect VPN for real-time traffic
Source: https://www.cisco.com/c/en/us/td/docs/security/asa/asa98/configuration/vpn/asa-98-vpn-config/vpn-anyconnect.html
Topics
Community Discussion
No community discussion yet for this question.