A network engineer has been tasked with configuring SSL VPN to provide remote users with access to the corporate network. Traffic destined to the enterprise IP range should go through the tunnel…

The correct answer is C. split-tunnel. Split tunneling allows the VPN client to selectively route traffic: only traffic matching the defined enterprise IP ranges is sent through the encrypted VPN tunnel, while all other traffic (e.g., general internet browsing) exits directly via the client's local internet…

Remote Access VPN

Question

A network engineer has been tasked with configuring SSL VPN to provide remote users with access to the corporate network. Traffic destined to the enterprise IP range should go through the tunnel, and all other traffic should go directly to the Internet. Which feature should be configured to achieve this?

Options

AU-turning
Bhairpinning
Csplit-tunnel
Ddual-homing

How the community answered

(41 responses)

A
2% (1)
B
5% (2)
C
90% (37)
D
2% (1)

Explanation

Split tunneling allows the VPN client to selectively route traffic: only traffic matching the defined enterprise IP ranges is sent through the encrypted VPN tunnel, while all other traffic (e.g., general internet browsing) exits directly via the client's local internet connection. This reduces VPN gateway load and improves performance for non-corporate traffic. By contrast, hairpinning (also called U-turning) forces all client traffic - including internet-bound traffic - into the tunnel and back out through the corporate gateway, which is the opposite behavior. Dual-homing refers to a device having two network interfaces for redundancy or load balancing and is unrelated to VPN traffic steering.

Topics

#split tunnel#AnyConnect#traffic routing#group policy

Community Discussion

No community discussion yet for this question.

Full 300-730 Practice