After adding a remote-access IPsec tunnel via the VPN wizard, an administrator needs to tune the IPsec policy parameters. Where is the correct place to tune the IPsec policy parameters in Cisco ASDM?
A. IPsec user profile
B. Crypto Map
C. Group Policy
D. IPsec policy
E. IKE policy
B is correct.
C is wrong because you can’t edit IPSec settings in Group Policy. Group Policy only let you select version 1 or 2. IPSec parameters can only be edit in Crypto Map where you can specify interesting traffic and encryptions. Remote and Site-to-Site IPSec vpn both are under Crypto Map.
Under Remote Access VPN, you can this setting under Network (client) Access -> Advanced -> IPSec -> Crypto Map.
I had to built one in my lap to understand this question.