When designing remote access to the Enterprise Campus network for teleworkers and mobileworkers, which of the following should the designer consider?()
A. It is recommended to place the VPN termination device in line with the Enterprise Edge 1
B. Maintaining access rules, based on the source IP of the client, on an internal firewall drawnfrom a headend RADIUS server is the most secure deployment
C. VPN Headend routing using Reverse Route Injection (RRI) with distribution is recommended when the remote user community is small and dedicated DHCP scopes are in place
D. Clientless SSL VPNs provide more granular access control than SSL VPN clients (thin or thick),including at Layer 7