A security administrator must implement a firewall rule to allow remote employees to VPN onto the
company network. The VPN concentrator implements SSL VPN over the standard HTTPS port.
Which of the following is the MOST secure ACL to implement at the company’s gateway firewall?
A.
PERMIT TCP FROM ANY 443 TO 199.70.5.25 443
B.
PERMIT TCP FROM ANY ANY TO 199.70.5.23 ANY
C.
PERMIT TCP FROM 199.70.5.23 ANY TO ANY ANY
D.
PERMIT TCP FROM ANY 1024-65535 TO 199.70.5.23 443
Shouldn’t this be A? Allow only port 443 TCP in, but from anywhere.
1
0