Split tunneling via VPNgorups

[mbergen]

How do I set up a split tunnel that allows my VPN users to access the internet as well as VPN into the PIX?

If I have two access lists, one for access to the DMZ and one for access to the internal network, set up for these remote users, which access list do I define for split tunneling?

[ross.filipek]

You'd want to use the 'vpngroup split-tunnel' command on the PIX, which is available in 6.1. See http://www.cisco.com/univercd/cc/td/doc/product/iaabu/pix/pix_61/cmd_ref/tz.htm#xtocid10 for the details.

You'd also probably just need one access list, since all the ACL is really doing is defining what traffic should be sent across the tunnel.