Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

VPN Internet access WITHOUT SPLIT Tunneling

We have a VPN 3030 which connects to a PIX 6.1 on the VPNDMZ. We want to route traffic from a vpn client through the VPNDMZ and out to the internet via the outside interface of the PIX. Is this possible? Where are the configuration changes applied? We are trying to avoid split tunnel.

3 REPLIES
New Member

Re: VPN Internet access WITHOUT SPLIT Tunneling

By design the PIX will never route traffic back out the interface that traffic came in on - this is something that you can't do much about. Your best choices are to either:

a) run split-tunnel

b) use a proxy server beyone the PIX.

My recommendation would be to use split tunnel, since it allows you to restrict access to internal hosts via an ACL. Not using split-tunneling means you're opening the entire inside network (basically).

Mike.

Gold

Re: VPN Internet access WITHOUT SPLIT Tunneling

would setting up a proxy server help?

New Member

Re: VPN Internet access WITHOUT SPLIT Tunneling

Yes, your clients will be able to target this with their browsers and then the proxy server will forward out the requests via your pix.

255
Views
0
Helpful
3
Replies