Access to Internet from VPN through ASA

Unanswered Question
Nov 28th, 2008
User Badges:


I have configured IPSec VPN and it works. But The client has access to inside servers but not to Internet http through the ASA.

I have opened split-tunnel at the moment, but it is a temporarily solution.

How can I configure to have access to Internet http from VPN clients through the ASA?

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 5 (2 ratings)
JORGE RODRIGUEZ Fri, 11/28/2008 - 05:42
User Badges:
  • Green, 3000 points or more

Configure your vpn as full tunnel, no split

and add this to your config to allow vpn pool network get outbound internet access.

same-security-traffic permit intra-interface

global (outside ) 1 interface

nat (outside) 1

seanw_nic Wed, 08/24/2011 - 12:29
User Badges:

Thanks. This worked for me. I was missing the NAT statement for the outside interface.

JORGE RODRIGUEZ Fri, 11/28/2008 - 07:18
User Badges:
  • Green, 3000 points or more

Elena, the link provided by Arul is great to get full understanding and terms.. the statements I have provided originally also depicts the same principle on the link.

Bst Rgds



This Discussion