300-730 · Question #166
A network administrator wants the Cisco ASA to automatically start downloading the Cisco AnyConnect client without prompting the user to select between WebVPN or AnyConnect. Which command…
The correct answer is B. anyconnect ask none default anyconnect. The 'anyconnect ask none default anyconnect' command configures the ASA to bypass the portal page selection prompt and immediately initiate the AnyConnect client download.
Question
Options
- Aanyconnect ssl df-bit-ignore enable
- Banyconnect ask none default anyconnect
- Canyconnect ask enable default anyconnect
- Danyconnect modules value default
How the community answered
(49 responses)- A6% (3)
- B88% (43)
- C2% (1)
- D4% (2)
Why each option
The 'anyconnect ask none default anyconnect' command configures the ASA to bypass the portal page selection prompt and immediately initiate the AnyConnect client download.
The 'anyconnect ssl df-bit-ignore enable' command instructs the ASA to ignore the DF bit to avoid fragmentation issues and has no effect on the client download prompt.
The 'anyconnect ask none' portion disables the prompt that would otherwise let the user choose between WebVPN and AnyConnect, while 'default anyconnect' sets AnyConnect as the automatic selection. This causes the ASA to immediately begin pushing the AnyConnect client to the connecting user without requiring any interaction.
The 'anyconnect ask enable' portion activates the selection prompt rather than suppressing it, so the user would still be presented with a choice between WebVPN and AnyConnect.
The 'anyconnect modules value' command specifies which optional AnyConnect modules to deploy and does not control the client download prompt behavior.
Concept tested: Cisco ASA AnyConnect automatic client download configuration
Source: https://www.cisco.com/c/en/us/td/docs/security/asa/asa96/configuration/vpn/asa-96-vpn-config/vpn-anyconnect.html
Topics
Community Discussion
No community discussion yet for this question.