Exam 300-710 topic 1 question 357 discussion

A. Unblock the remote firewall connection B. Set the VPN to support two-way traffic. --- wrong , already there're inbound and outbound C. Bring the VPN tunnel up. --- wrong - already up D. Match the crypto access control list. -- wrong, VPN already up E. Reconfigure the web server

From the output it looks like a VPN connection is established fine at Phase 2 (ipsec) - as both packets encrypt/decrypt counters show traffic. The SA Lifetime in sec is also in place - so, IMHO, the VPN config looks fine (also the ACL defining interesting traffic is fine with Source-Destination specifications). Looking at this phrase "The engineer confirms that NAT and access control rules on the local Cisco Secure Firewall Threat Defense Virtual will allow the connection" it tells me that the local head-end is correctly configured - making me think that the real issue is on the remote end BUT not on IPSEC VPN side as that one is UP. Using eliminating techniques and based on Remote End issues, where there is no output, I will go with a Remote Firewall situation and a Web Server reconfiguration