Home > Articles > Cisco Certification > CCNP > CCNP Security VPN: Advanced Easy VPN Authorization

CCNP Security VPN: Advanced Easy VPN Authorization


  1. "Do I Know This Already?" Quiz
  2. Foundation Topics
  3. Exam Preparation Tasks

Chapter Description

This chapter enables you to prepare for the deployment of an advanced authorization scheme for your remote users, allowing you to control the level of access granted to them based on such information as their internal department, username, IP address, and so on, using the familiar local group policies that are configured on the ASA device.

Exam Preparation Tasks

As mentioned in the section “How to Use This Book” in the Introduction, you have a few choices for exam preparation: Chapter 22, “Final Exam Preparation,” Appendix C, “Memory Tables” (CD only), and the exam simulation questions on the CD.

Review All Key Topics

Review the most important topics in the chapter, noted with the Key Topic icon in the outer margin of the page. Table 17-5 lists a reference of these key topics and the page numbers on which each is found.


Table 17-5 Key Topics

Key Topic Element



Bulleted list

Group policy types



Assigning a group policy to a user account



Assigning a group policy to a connection profile


Bulleted list

Available accounting methods


Bulleted list

Available logging levels


Bulleted list

NetFlow flow-creation actions


Complete Tables and Lists from Memory

Print a copy of Appendix C, “Memory Tables” (found on the CD), or at least the section for this chapter, and complete the tables and lists from memory. Appendix D, “Memory Tables Answer Key,” also on the CD, includes completed tables and lists to check your work.

Define Key Terms

Define the following key terms from this chapter, and check your answers in the glossary:

  • external group policy, internal group policy, NetFlow, SNMP (Simple Network Management Protocol)