Implementing and Operating Cisco Enterprise Network Core Technologies (ENCOR) v1.2SecurityMedium
A network architect is designing a secure remote access solution for external partners to access specific internal web applications. The solution needs to be clientless, leverage existing web browsers, and provide basic encryption. Which VPN technology best fits these requirements?
- ADMVPN
- BFlexVPN
- CIPsec VPN
- DSSL VPN (Clientless)
Show answer & explanationAnswer & explanation
Correct answer: D. SSL VPN (Clientless)
Clientless SSL VPNs allow remote users to access internal web resources directly through a web browser without installing any dedicated VPN client software. This makes it ideal for external partners needing access to specific web applications with minimal setup, providing encryption over HTTPS.
Why the other options are wrong
- A. DMVPN is designed for dynamic site-to-site connectivity between many spokes and a hub, not clientless remote access for individual users.
- B. FlexVPN is a unified VPN framework often used for advanced IPsec deployments, typically requiring client software for remote access (AnyConnect).
- C. IPsec VPN typically requires client software or is used for site-to-site connections; it's not clientless for remote access.
Clientless SSL VPN
A type of SSL VPN that provides remote access to network resources, primarily web-based applications, using only a standard web browser without requiring dedicated client software.
- Uses HTTPS for secure communication.
- Ideal for external partners or contractors.
- Provides access to web applications, file shares (through web interface), and sometimes limited network access.
Memory trick: Remote friends need a VPN door.