?
Solved

Local printing on Cisco VPN

Posted on 2011-04-20
10
Medium Priority
?
985 Views
Last Modified: 2012-05-11
My company uses Cisco VPN with local LAN access denied when connected.

While I fully understand WHY this is necessary, how do I work around it?  

I am not trying to gain wide open access.  I just want to add a connection to my printer.  As a bonus if I could connect to my file server as well that would be great.

I have a lot of documents that I want to print however my Printer is on my local network.  Therefore when I connect to the VPN, all local access breaks.  I can't access file shares on my other computer, nor print to my Network Printer.

My questions are:  

1.  How does the Cisco VPN client achieve this?  I found some references indicating that I could change my routing Table to gain access to my local printer, but the directions I found didn't work.
2.  Is there another VPN Client that I can aquire that will grant me more local control?
3.  Is this is due to some kind of Cisco local firewall?  

If this is due to the Stateful firewall, if I uninstall and reinstall following the instructions  here and use the installation option:
msiexec.exe /i vpnclient_setup.msi DONTINSTALLFIREWALL=1

Open in new window


Will I still be able to connect to the VPN, or is there something on the Firewall that will detect the lack of the firewall.

I am running the Cisco VPN Client 5.0.07.0290 on Windows 7 Professional 64-bit.  I have local administrator rights and my computer is not on a domain.

PLEASE DON'T REPLY back with instructions on how to change the tunnel configuration on the firewall.  I can NOT use split tunnels.  The Security team is not interested in my inability to print.  The "Official Corporate" work around is to download the file to the computer, then disconnect from the VPN to print.  

This is too much of a pain.

Thanks!
0
Comment
Question by:brittonv
9 Comments
 
LVL 10

Expert Comment

by:Hutch_77
ID: 35432471
This MAY work, and is just a shot in the dark there may be better answers.  You might try installing XP Mode and install the VPN in the XPMode and run it in XP Mode and see if 7 has lan access still.  I have never personally tried this but could possibly work as it is working in shared environments.
0
 
LVL 9

Expert Comment

by:DanJ
ID: 35432790
This is from release 4.8.
Open the connection properties and then select the Transport Tab.
Check the Allow Local LAN Access Box.
0
 
LVL 8

Author Comment

by:brittonv
ID: 35432811
No I can't use XP Mode, and the 4.8 release of the VPN client is for XP!
0
Prepare for an Exciting Career in Cybersecurity

Help prevent cyber-threats and provide solutions to safeguard our global digital economy. Earn your MS in Cybersecurity. WGU’s MSCSIA degree program curriculum features two internationally recognized certifications from the EC-Council at no additional time or cost.

 
LVL 9

Expert Comment

by:DanJ
ID: 35432921
it has the same GUI interface.
0
 
LVL 8

Author Comment

by:brittonv
ID: 35435010
In order for that to work split tunnels need be configured on the firewall
0
 
LVL 72

Expert Comment

by:Qlemo
ID: 35773720
Should you still be interested in the answer: You can't do that. Cisco VPN is completely blocking access to anything on your LAN. Only by allowing local LAN access you can print locally. With one exception: W2008R2 RDC features might allow for local printing - but I guess that is no option.

There are Cisco compatible clients out there, even a free one - but I will not recommend that, because it is a breach of security. If your IT guys do not allow local access, it is their policy.
0
 
LVL 8

Accepted Solution

by:
brittonv earned 0 total points
ID: 35774303
I worked around this issue by using the shrew soft Opensource VPN Client.  It imported the cisco pcf perfectly
0
 
LVL 8

Author Comment

by:brittonv
ID: 35774306
I found a solution
0
 
LVL 8

Author Closing Comment

by:brittonv
ID: 35807123
The above comments didn't work.  Google shrew soft vpn
0

Featured Post

SMB Security Just Got a Layer Stronger

WatchGuard acquires Percipient Networks to extend protection to the DNS layer, further increasing the value of Total Security Suite.  Learn more about what this means for you and how you can improve your security with WatchGuard today!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

OpenVPN is a great open source VPN server that is capable of providing quick and easy VPN access to your network on the cheap.  By default the software is configured to allow open access to your network.  But what if you want to restrict users to on…
Powerful tools can do wonders, but only in the right hands.  Nowhere is this more obvious than with the cloud.
Both in life and business – not all partnerships are created equal. As the demand for cloud services increases, so do the number of self-proclaimed cloud partners. Asking the right questions up front in the partnership, will enable both parties …
Both in life and business – not all partnerships are created equal. Spend 30 short minutes with us to learn:   • Key questions to ask when considering a partnership to accelerate your business into the cloud • Pitfalls and mistakes other partners…

621 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question