Solved

Cisco ASA 5510 doesnt allow web traffic through VPN

Posted on 2013-02-01
3
567 Views
Last Modified: 2013-02-04
I understand its a pretty vague question but i inherited an already configured ASA 5510 at my current employer.  I am not a cisco guru by any stretch and was hoping someone could help me figure out why web traffic is not allowed when you are connected via VPN to our ASA.  Is this default behavior or should i be looking for an acl entry that denies this traffic?
0
Comment
Question by:joshparker
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
3 Comments
 
LVL 20

Assisted Solution

by:rauenpc
rauenpc earned 250 total points
ID: 38845779
There is probably no split tunnel applied to the vpn tunnel. A quick google search for cisco split tunnel will get you explanations and examples
0
 
LVL 16

Accepted Solution

by:
max_the_king earned 250 total points
ID: 38846585
Hi,
by default you aren't allowed to go ut to the internet when into the vpn tunnel. As rauenpc suggested, you need to add split tunnel configuration:

create an access-list for your internal LAN (in my example assuming it is 192.168.1.0/24)

access-list splittunnel standard permit 192.168.1.0 255.255.255.0

and into the group-policy attributes you need to add

split-tunnel-policy tunnelspecified
 split-tunnel-network-list value splittunnel

which references to the access-list splittunnel

hope this helps
max
0
 

Author Closing Comment

by:joshparker
ID: 38851119
Thank you very much guys.  This is exactly what i needed.
0

Featured Post

Save the day with this special offer from ATEN!

Save 30% on the CV211 using promo code EXPERTS30 now through April 30th. The ATEN CV211 connects a laptop directly to any server allowing you instant access to perform data maintenance and local operations, for quick troubleshooting, updating, service and repair.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

If you use NetMotion Mobility on your PC and plan to upgrade to Windows 10, it may not work unless you take these steps.
A 2007 NCSA Cyber Security survey revealed that a mere 4% of the population has a full understanding of firewalls. As business owner, you should be part of that 4% that has a full understanding.
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
Windows 10 is mostly good. However the one thing that annoys me is how many clicks you have to do to dial a VPN connection. You have to go to settings from the start menu, (2 clicks), Network and Internet (1 click), Click VPN (another click) then fi…

691 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question