cisco press ccna 200 301

cisco press ccna 200 301.Should the CiscoASA be placed behind another firewall? If so, which ports should that firewall be allowed to release traffic that accesses them? Should decrypted traffic be allowed to traverse another set of firewalls? If so, which ports should those firewalls be allowed to release traffic accessingIf so, which ports should those firewalls be allowed to access? The network security administrator needs to determine the size of the SSLVPN deployment and, in particular, the number of concurrent users gaining access to the internal network in the form of remote access.The number of concurrent users gaining access to the internal network as remote access. If one Cisco ASA is not sufficient to support the required number of users, consider a Cisco ASA VPN load balancing solution to accommodate all potential remote users accessing the intranet.To enable the ASA's SSL VPN functionality, a license is also required. For example, if a unit's network environment requires support for 75 simultaneous SSL VPN users, an SSL VPN license can be purchased for up to 100 potentially concurrent users. SSL VPN infrastructure requirements include, but are not limited to, the following. ASA placement: If the security appliance to be installed is a new purchase, ensure that it is installed in the location that best meets the design requirements. If the security appliance is to be placed behind the unit's existing firewall, make sure to allow that firewall to release the appropriate SSL VPN traffic.User accounts: Before an SSLVPN tunnel can be established, users must be authenticated by the security appliance's local database or by an external authentication server. A variety of external authentication servers are available, such as RADIUS (including Password Expiry using MSCHAPv2 to NT LAN Manager), RADIUS One Time Password (OTP), RS A SecurlD, Active Directory/Kerberos, and Generic Lightweight Directory Access Protocol (LDAP) O ensures that accounts owned by SSLVPN users have the appropriate7.7 Post-Lesson Exercises 333The access rights for the LDAP password expiration (passwordexpiration) applies to Microsoft and Sun LDAPOAdministrative privileges: if host mapping is to be used, then all connections to port forwarding require administrative privileges on the local workstation.7.6 Review of Examination Points