<div>
What may be easiest is...<br />
<br />
1) Open the properties for your VPN connection<br />
2) Go to &quot;Network&quot; <br />
3) Double click on TCP/IP protocol<br />
4) Click &quot;Advanced&quot;.<br />
5) Uncheck &quot;Use as default gateway&quot; (or something similarly worded)<br />
<br />
They then should be able to browse via their own connection and still work over the VPN.<br />
<br />

</div>


<div>
I've done this before and it does work, but then they are not able to access intranet sites that we have on different subnets. &nbsp; Have I just outgrown my ISA? &nbsp;I would prefer to have their internet traffic go through my ISA server while they are VPN'ed in. 
</div>


<div>
Ah, I gotcha.<br />
<br />
You should read over this article ( <a href="http://www.isaserver.org/tutorials/2004fixipsectunnel.html" rel="ugc">http://www.isaserver.org/tutorials/2004fixipsectunnel.html</a>&nbsp;). I think it may point you in the right direction.
</div>


<div>
yeah read that already. It made my head hurt.....
</div>


<div>
That's what I needed. Thanks.
</div>


<div>
<div class="content wysiwyg-content">
I'm sure this has been answered before, but I can't find any up to date responses. &nbsp;I'm still using ISA 2004 for inbound VPN connections from my users. &nbsp;While they are vpn'ed in, they are unable to surf the internet. &nbsp;I understand the risks, but is everyone allowing it now-a-days? &nbsp; Our guys constantly need to get on the internet. &nbsp; Is there something I can enable on ISA to allow this or do they have to make the change on their vpn connection to allow split tunneling?
</div>
</div>


I'm sure this has been answered before, but I can't find any up to date responses.  I'm still using ISA 2004 for inbound VPN connections from my users.  While they are vpn'ed in, they are unable to surf the internet.  I understand the risks, but is everyone allowing it now-a-days?   Our guys constantly need to get on the internet.   Is there something I can enable on ISA to allow this or do they have to make the change on their vpn connection to allow split tunneling?

Allow internet while VPN'ed in on ISA 2004

Microsoft Forefront, formerly known as Internet Security and Acceleration Server (ISA Server), is a network router, firewall, antivirus program, VPN server and web cache that runs on Windows servers. It includes identity management and protection systems, and discontinued systems for threat management and network protection, along with protection for Sharepoint and Exchange. The scope of discussions includes forward and reverse proxy, application and service publishing, virtual private networks (VPNs), outbound access rules, SSL certificates and network routing within either a single node or an highly-available array pairing.

Microsoft Forefront ISA Server

A virtual private network (VPN) is a network that uses a public telecommunication infrastructure, such as the Internet, to provide remote offices or travelling users access to a central organizational network securely. VPNs encapsulate data transfers using secure cryptographic methods and other security mechanisms to ensure that only authorized users can access the network and that the data cannot be intercepted.

The Windows operating systems have distinct methodologies for designing and implementing networks, and have specific systems to accomplish various networking processes, such as Exchange for email, Sharepoint for shared files and programs, and IIS for delivery of web pages. Microsoft also produces server technologies for networked database use, security and virtualization.