The video demonstrates different ways that you can deploy client-based certificate authentication for remote access VPN with Cisco Secure Client (AnyConnect) on Cisco Firepower 7.0. Some of things that we will be configuring include tunnel-group selection, certificate mapping, username selection, authorization against Cisco ISE, and dual-factor authentication with certificate and AD credential. We will be testing all these features on a Windows client.