I currently use a VPN concentrator for a VPN to a "Restricted" area on our network.
The network allowed list prevents users from speaking to two specific IP's. We don't allow them to talk to our ISA servers will connected to the VPN. However, a user on the same subnet can talk to this IP. Other users not on that subnet work fine.
Anyone have any expierence with this?