Free Cisco 300-730 SVPN Actual Exam Questions - Question 2 Discussion
A network engineer must design a clientless VPN solution for a company. VPN users must be able to access several internal web servers. When reachability to those web servers was tested, it was found that one website is not being rewritten correctly by the ASA. Remote users must be able to access an internal webserver via the URL example.com. Which two steps accomplish this task? (Choose two.)
B NAT translation is definitely required so the ASA forwards requests properly. Without that, users can’t reach the internal server. So B is a must-have here.
The URL rewrite issue hints that just NAT (B) isn’t enough; a smart tunnel (A) might fix path handling.
The NAT rule (B) definitely has to be in place so the ASA knows how to forward requests to the internal web server. For the second step, setting up a smart tunnel (A) could help because it provides a secure path and can handle the rewriting issues better than just relying on ACLs or AnyConnect split tunneling. The WebACL (D) only controls access, doesn’t fix URL rewriting. Also, AnyConnect with split tunneling (C) is more about full VPN clients, not clientless setups, so it seems off here. So B and A together make the most sense to me.
B imo, the NAT rule is a must because without translating the public address to the internal server, users won’t get through. For the second step, I’d say A makes more sense than D since setting up a smart tunnel can help with handling traffic properly and might assist with the URL rewriting issue. D feels too generic, just permitting traffic won’t fix URL issues directly. The smart tunnel helps manage traffic between the user and server more specifically, which could allow the ASA to rewrite URLs correctly.
B sounds necessary for sure, but none of the other options mention URL rewriting explicitly. Could the answer involve a feature outside these choices, like configuring a rewrite rule or using a DNS trick?
Maybe B and D. NAT rule seems necessary to translate the address correctly, and a WebACL would help control access to the web server. The others don’t really fit clientless VPN needs.