You have three Gateways in a mesh community. Each gateway's VPN Domain is their internal network as
defined on the Topology tab setting "All IP Addresses behind Gateway based on Topology information."
You want to test the route-based VPN, so you created VTIs among the Gateways and created static route
entries for the VTIs. However, when you test the VPN, you find out the VPN still go through the regular
domain IPsec tunnels instead of the routed VTI tunnels.
When configuring a Web Application for SSL VPN remote access, you have given the following definition
for the application along with its protection level.
You need to verify the effectiveness of your IPS configuration for your Web server farm. You have a
colleague run penetration tests to confirm that the Web servers are secure against traffic hijacks. Of the
following, which would be the best configuration to protect from a traffic hijack attempt?