An administrator desires that when work laptops are not connected to the corporate network,
they should automatically initiate an AnyConnect VPN tunnel back to headquarters. Where
does the administrator configure this?
A.
Via the svc trusted-network command under the group-policy sub-configuration mode on
the ASA
B.
Under the “Automatic VPN Policy” section inside the Anyconnect Profile Editor within
ASDM
C.
Under the TNDPolicy XML section within the Local Preferences file on the client computer
D.
Via the svc trusted-network command under the global webvpn sub-configuration mode
on the ASA
C
The correct answera is B.
Trusted Network Detection is typically used by remote users who spend time working
from both a remote location and their corporate office using the same device. The Any-
Connect client can be configured to look for certain parameters that enable it to recognize
whether the network the local machine is currently using is a trusted (internal) network
(for example, the corporate LAN) or if the network currently being used is untrusted (external)
(for example, user’s home or an Internet cafe).
The settings required for a successful configuration of Trusted Network Detection are
configured in the AnyConnect client profile. In the AnyConnect Client
Profile Editor, navigate to Preferences (Part 2) and check Automatic VPN Policy to allow
the trusted network detection settings to become available.