You are using ASDM to verify a clientless SSL VPN configuration made by a junior administrator on an ASA.
Please click exhibit to answer the following questions.
Exhibit:
Which of the following statements is true regarding the display of a banner message when users establish a
clientless SSL VPN session by using the extranet connection profile? (Select the best answer.)
A.
No banner message will be displayed.
B.
A generic banner message will be displayed that states “Welcome to SSL VPN Service.”
C.
A custom banner message will be displayed that states “Welcome to Boson Software!”
D.
For each user, a custom banner message will be displayed for each user that states “Welcome user-name.”
Explanation:
No banner message will be displayed when users establish a clientless Secure Sockets Layer (SSL) virtual
private network (VPN) session by using the extranet connection profile. You can configure a banner message
to be displayed when users establish a clientless SSL VPN connection. This information is configured in the
group policy that is associated with the connection profile used to create the connection.
In this scenario, you want to determine whether a banner message will be displayed when the extranet
connection profile is used. The extranet connection profile uses the DfltGrpPolicy group policy, so you should
view the details of that group policy. To view the details of the DfltGrpPolicy group policy, you should click
Configuration, expand Clientless SSL VPN Access, and click Group Policies. You can then doubleclick
DfltGrpPolicy (System Default), which will open the Edit Internal Group Policy dialog box, which is shown in the
following exhibit:
The Banner entry contains no value. As a result, clientless SSL VPN connections made by using connection
profiles that use the DfltGrpPolicy group policy will not display a banner to users when they establish a
connection.
VPN connections made by using the boson connection profile will display the message “Welcome to Boson
Software!” This message will not be displayed for connections made by using the extranet connection profile.
No group policy has been configured with a banner of “Welcome to SSL VPN Service.” In addition, no group
policy has been configured with a banner of “Welcome username.” Thus no VPN connections in this scenario
will display either of these banner messages.Cisco: General VPN Setup: Adding or Editing a Remote Access Internal Group Policy, General Attributes
