You are configuring a connection profile for Cisco AnyConnect SSL VPN users. You have accessed the Add
SSL VPN Connection Profile dialog box in ASDM. You want to configure a group URL for the connection profile.
On which of the following screens of this dialog box will you be able to accomplish your goal? (Select the best
answer.)
A.
the Basic screen
B.
the General screen
C.
the Authorization screen
D.
the SSL VPN screen
Explanation:
You can configure a group Uniform Resource Locator (URL) for the connection profile that you are configuring
for Cisco AnyConnect Secure Sockets Layer (SSL) virtual private network (VPN) users on the SSL VPN screen
of the Add SSL VPN Connection Profiledialog box in Cisco Adaptive Security DeviceManager (ASDM). If you configure a group URL for SSL VPN users, the users can connect to the group URL
and will not be required to select a tunnel group when they establish a connection. In such a scenario, the user
is presented with only user name and password fields on the login screen. The Cisco Adaptive Security
Appliance (ASA) examines the URL from which the user is connecting and automatically applies the connection
profile associated with the URL. Configuring a group URL can help improve security because the user is not
presented with a list of available connection profiles.
To configure a group URL for a new SSL VPN connection profile in ASDM, you should click Configuration,
expand Network (Client) Access, click AnyConnect Connection Profiles, and click Add under Connection
Profiles, which will open the Add SSL VPN Connection Profile dialog box. In the Add SSL VPN Connection
Profile dialog box, expand Advanced and click SSL VPN to open the SSL VPN screen, which is shown in the
following exhibit:
You cannot configure a group URL on the Basic screen of the Add SSL VPN Connection Profile dialog box in
ASDM. On the Basic screen, you can configure the connection profile name, the Authentication, Authorization,
and Accounting (AAA) server group, the default group policy, and client addressing information, such as
Dynamic Host Configuration Protocol (DHCP) servers and IP address pools.
You cannot configure a group URL on the General screen of the Add SSL VPN Connection Profile dialog box in
ASDM. On the General screen, you can enable password management and configure password expiration
notification options.
You cannot configure a group URL on the Authorization screen of the Add SSL VPN Connection Profile dialog
box in ASDM. On the Authorization screen, you can configure an authorization server group and user name
certificate mapping.Cisco: General VPN Setup: Add or Edit SSL VPN Connections > Advanced > SSL VPN
