Solved

Cisco ASA SSL VPN

Posted on 2010-09-09
5
665 Views
Last Modified: 2013-11-13
Hi,

I have a Cisco ASA 5510.  We have setup an SSL VPN using client download.  When the user connects to the SSL VPN they can browse and ping all resources on the internal network and use internal DNS, but they can no longer use the internet.  When loading websites the browser session just times out.

When I rund CMD prompt I pinging to www.google.com resolves to an IP address, but does not reply, same with tracert, it resolves but never reaches the google server.  

I think this could be an issue with split tunneling/DNS.  The fact that users can access all network resources, but cannot get out on the internet tells me that they are trying to come through the tunnel to use their local internet connection.  How would I change this?  

Any help would be much appreciated.  

Thanks

Neo3998
0
Comment
Question by:neo3998
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
  • 2
5 Comments
 
LVL 17

Expert Comment

by:Kvistofta
ID: 33635667
Verify this:

1) Nat for outside traffic to outside.Like:
nat (outside) 1 10.0.0.0 255.255.255.0 where the ip network is your vpn client pool)
global (outside) 1 1.2.3.4 (where 1.2.3.4 is a public ip.

2) Is there any split-tunnel-policy defined in the group-policy?

3) Add "same security permit-intra-interface"

Verify these steps, if it still doesnt work please post your sanitized config here for investigation.

/Kvistofta
0
 
LVL 2

Author Comment

by:neo3998
ID: 33635981
Hi,

I am making changes via ASDM as I am not too great with Cisco command line.  How would I make these changes using this method?  

Thanks

Neo3998
0
 
LVL 17

Expert Comment

by:Kvistofta
ID: 33636080
I never use ASDM, cant tell you. Maybe someone else here can fill the gap? Unless you post the config here. This can be extracted from asdm from any of the top-menus in the gui.

/Kvistofta
0
 
LVL 57

Accepted Solution

by:
Pete Long earned 500 total points
ID: 33636814
0
 
LVL 2

Author Closing Comment

by:neo3998
ID: 33644745
Thanks very much :)
0

Featured Post

Easy, flexible multimedia distribution & control

Coming soon!  Ideal for large-scale A/V applications, ATEN's VM3200 Modular Matrix Switch is an all-in-one solution that simplifies video wall integration. Easily customize display layouts to see what you want, how you want it in 4k.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

How to set-up an On Demand, IPSec, Site to SIte, VPN from a Draytek Vigor Router to a Cyberoam UTM Appliance. A concise guide to the settings required on both devices
There’s a movement in Information Technology (IT), and while it’s hard to define, it is gaining momentum. Some call it “stream-lined IT;” others call it “thin-model IT.”
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

688 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question