Which component provides secure traversal for remote endpoints?

• A. Cisco ASA VPN gateway
• B. VPN client on endpoint
• C. Web VPN concentrator
• D. Cisco Expressway (MRA) or a similar edge traversal solution.

Answer: (D)

When remote endpoints need to reach inside you must have a way to punch through NATs and firewalls while keeping signaling and media secure. An edge traversal component serves exactly this role by sitting at the network edge and handling the secure traversal of both signaling and media for devices outside the LAN.

Cisco Expressway (MRA) or a similar edge traversal solution provides this capability. It acts as a traversal border between remote endpoints (such as Jabber clients on mobile or outside networks) and your internal collaboration resources, enabling secure, firewall/NAT-tolerant connections without requiring every user to establish a VPN. It negotiates and maintains the media paths (often using ICE/STUN/TURN) and ensures encrypted signaling and media, making remote access seamless and secure.

In contrast, a VPN gateway or VPN client focuses on creating a secure tunnel into the network rather than specifically enabling traversal for real-time collaboration traffic through NAT/firewalls, so they’re a different approach to remote access. A Web VPN concentrator is also a VPN-based solution, not the edge traversal mechanism designed for collaboration traffic.