-----Hosts--------PIX-------->outside world.

[rgrcommo]

What do you have to add on the PIX so that clients can access the outside (internet) when the clients are only setup for IPSec so that clients on the Outside interface can access them using the VPN client? Does anyone have any ideas - ?

[ssoberlik]

You’ll have to place a router on the INSIDE network that is the default gateway of the VPN clients. That routers gateway will be the PIX inside interface and the PIX must be setup for NAT and outbound connectivity.

[tialen.kelley]

If you are just talking about your IPsec clients being able to access the Internet and the Internal LAN at the same time when they are VPN'd into the network, then the split tunneling command should work for you....

vpngroup (group-name) split-tunnel vpn