Exam 300-730 topic 1 question 111 discussion

AnyConnect uses IKE to establish the tunnel (UDP 500/4500) and SSL for updating the software (client services)

AD is correct. Enable Client Services to allow the update over https

AE is the correctanswer

I apologize for the confusion in my previous responses. To achieve the goal of allowing Cisco AnyConnect users to access the outside interface using UDP 500/4500 and establish an SSL connection for software updates, the correct actions to be taken are: 1. IPsec (IKEv2) Allow Access must be checked on the outside interface: Enabling the "IPsec (IKEv2) Allow Access" option allows incoming IPsec traffic on UDP ports 500 and 4500 to reach the outside interface of the Cisco device. This is necessary to allow AnyConnect users to establish IPsec-based VPN connections. 2. SSL Allow Access must be checked on the outside interface: Enabling the "SSL Allow Access" option allows incoming SSL traffic to reach the outside interface. This enables AnyConnect users to establish an SSL connection for software updates, which ensures the ability to update the Cisco AnyConnect software over the same connection. By checking these two options on the outside interface, you allow AnyConnect users to connect using IPsec (UDP 500/4500) and establish an SSL connection for software updates, satisfying the requirements mentioned. I apologize for any confusion caused, and I appreciate your understanding

admin update the correct answers which are AD