ETExamTower
Q10Remote access VPNs

Refer to the exhibit. Based on it, why can users not access the CCNP Webserver bookmark?

Question exhibit
← → navigate · a answer
Community votes
B
100% (4)
A
0% (0)
C
0% (0)
D
0% (0)
Discussion · 11
4
B is correct. WebVPN Clients Cannot Hit Bookmarks and is Grayed Out Problem If these bookmarks were set up for users to sign in to the clientless VPN, but on the home screen under "Web Applications" they appear as grayed out, how can I enable these HTTP links so that the users can click them and go into the particular URL? Solution You should first make sure that the ASA can resolve the websites through DNS. Try to ping the websites by name. If the ASA cannot resolve the name, the link is grayed out. If the DNS servers are internal to your network, configure the DNS domain-lookup private interface. https://www.cisco.com/c/en/us/support/docs/security-vpn/webvpn-ssl-vpn/119417-config-asa-00.html#anc15
3
it is usually greyed out when the ASA is not resolving the URL to IP address
B 2
Selected Answer: B B: If no DNS server is configured on the Cisco ASA or DNS resolution fails, the bookmark will be greyed out for the user.
B 2
Selected Answer: B B looks correct: https://community.cisco.com/t5/network-security/missing-ssl-vpn-bookmarks/td-p/1597023
1
You can't disable a bookmark entry (url). But you can block it with a WEB-ACL
1
so answer A is correct
1
B - Cisco says " if ASA cannot resolve the name, the link grayed out.
1
i also think its B
B 1
Selected Answer: B I tested this on my ASA firewall, and when the ASA is unable to resolve the name, the link would be greyed out, so it's B
1
Greyed out = Cannot Resolve via DNS configured on the ASA itself
1
Answer B is correct. Cannot Resolve via DNS