cisco press 200-301 volume 2

cisco press 200-301 volume 2.Administration Must install and configure the Cisco VPN client No VPN client software installation and no configuration of remote user computers is requiredEncryption Supports various encryption and hashing algorithms Supports SSL encryption that comes with the Web browserConnectivity Seamless connectivity to internal networks Application layer connectivity through browser portalsApplications Supports a variety of IP-based protocols, including TCP, UDP and ICMP applications Supports limited TCP-based client/server applications1. User ConnectivityBefore designing and implementing an SSL VPN solution for your network, you need to determine if your users will be connecting to your internal network from public computers (e.g., workstations in hotel rooms for guests or computers in Internet cafes). If there is a need for this, a clientless SSL VPN should be selected as the preferred solution for accessing protected resources. 2.2. The set of features supported by the VPN deviceWhen designing a VPN solution, you need to take into account the features that are already enabled by the VPN device. For example, a Cisco security appliance may already have various features enabled, such as IPSecVPN tunnels, routing engines, firewalls, and data inspection engines. Enabling SSLVPN functionality on an existing device that already has many features enabled will further increase its load. Before enabling SSL VPN, you must check the CPU, memory and cache usage of the security appliance.3. InfrastructurePlanningSince the role of turning on SSLVPN is to provide network access to remote users, the deployment location of the VPN termination device must be considered. The following issues should be clarified before implementing an SSL VPN solution.