You set up a mesh VPN Community, so your internal networks can access your partner’s network,
and vice versa. Your Security Policy encrypts only FTP and HTTP traffic through a VPN tunnel. All
other traffic among your internal and partner networks is sent in clear text. How do you configure
the VPN Community?
A.
Disable “accept all encrypted traffic”, and put FTP and HTTP in the Excluded services in the
Community object. Add a rule in the Security Policy for services FTP and http, with the Community
object in the VPN field.
B.
Disable “accept all encrypted traffic” in the Community, and add FTP and HTTP services to the
Security Policy, with that Community object in the VPN field.
C.
Enable “accept all encrypted traffic”, but put FTP and HTTP in the Excluded services in the
Community. Add a rule in the Security Policy, with services FTP and http, and the Community
object in the VPN field.
D.
Put FTP and HTTP in the Excluded services in the Community object. Then add a rule in the
Security Policy to allow Any as the service, with the Community object in the VPN field.
Explanation: