Split tunnel for for a spcific group?

scootertgm · ‎08-06-2007

We have a PIX 515E that controls our VPN access.

I have been requested to allow internet access for those who connect to the VPN.

This can be done with split tunneling. My question is:

We have two inside interfaces. One is no problem if they split tunnel. The other it is strictly not allowed.

There is only one outside interface. Can I allow split tunneling for one group while blocking split tunneling for the second?

Collin Clark · ‎08-06-2007

Create two VPN groups, one allowing split tunnel and the other not allowing it.

scootertgm · ‎08-08-2007

Forgive me, my PIX expierence is minimal. You are saying to create a group based on the destination IP?

Would you have a link refrencing this?