Refer to the exhibit. An engineer recently applied several configuration changes to a Cisco Adaptive Security Appliance; however, users report that a web app requiring Java plug-ins has stopped working through the Clientless SSL VPN. What must be the cause of this issue?
```
webvpn
enable outside
http-only-cookie enable
svc ask none default svc enable
port-forward auto
```

Question

Accepted Answer

C. The `http-only-cookie` command prevents the Java plug-ins from accessing the session cookie, causing the app to fail. When `http-only-cookie enable` is configured on a Cisco ASA, the HTTPOnly flag is applied to the WebVPN session cookie. Java plug-ins and applets use the Java networking API to access session cookies for portal authentication; the HTTPOnly attribute explicitly blocks any non-HTTP access to that cookie, including Java, causing Java plug-in dependent applications to fail within the Clientless SSL VPN portal.

Answer

A. The `svc ask none` command is blocking the required Java plug-ins for the app. The `svc ask none default svc` command controls which VPN mode is offered to connecting clients by default and has no effect on Java plug-in loading or functionality within a Clientless SSL VPN session.

Answer

B. The `port-forward auto` command is preventing the ASA from recognizing the Java plug-ins, causing the plug-in to be blocked. The `port-forward auto` command enables Clientless SSL VPN port forwarding for TCP-based application proxying and does not interfere with Java plug-in detection or execution in the WebVPN portal.

Answer

D. The `enable outside` command is misconfigured and blocking external web traffic. The `enable outside` command is the standard, required syntax to activate WebVPN on the outside interface of the ASA; it does not selectively block external web traffic or Java plug-in content when correctly configured.

Refer to the exhibit. An engineer recently applied several configuration changes to a Cisco Adaptive Security Appliance; however, users report that a web app requiring Java plug-ins has stopped…

Question

Options

How the community answered

Why each option

Topics

Community Discussion