PIX 501 & EZ VPN

[David_Coleman]

Just a quick question. I have a remote site that has a PIX 501 using DSL creating an EZ VPN link to a 3005 at my main site. When a user at the remote site makes an HTTP request, does the access go directly out from that location through the 501 and DSL or is it routed to my 3005 and redirected out from my main site? My main purpose for this question is that I want to do request filtering and monitoring and never gave much thought as to where the request exits the building.

[bstremp]

You can specify what traffic is tunneled across using access lists. If your acess lists is a permit any any, all your traffic is tunneled across to the main site. However, you can setup Split tunneling, where only the required traffic is tunneled accross to the remote site while the rest of the traffic could be put over the internet as normal traffic. For more informatio see http://www.cisco.com/univercd/cc/td/doc/product/software/ios122/122newft/122limit/122y/122yj/ftezvp2.htm#1121260