Link to home
Start Free TrialLog in
Avatar of vmich
vmichFlag for United States of America

asked on

Cant connect to my internet once cnnected to VPN

I am running Windows 10 and each time that I use Cisco Anyconnect to connect to vpn's, I lose my laptops connectivity to the internet and my email and such.
Is there anyway to keep my internet access there while connected to vpns?
Avatar of John
John
Flag of Canada image

You need to enable split tunneling to do that. I do not use AnyConnect but rather I use a commercial VPN application that allows split tunneling as a setup option
Avatar of vmich

ASKER

Can I do spilt tunneling with Cisco Anyconnect and if not what are my options
There has to be something I can do with Cisco Anyconnect if anyone knows?
You would have to look in the AnyConnect options for that setting. PPTP from Microsoft does not do split tunneling

Here is a Cisco technical document on enabling Split Tunneling

http://www.cisco.com/c/en/us/support/docs/security/anyconnect-secure-mobility-client/119006-configure-anyconnect-00.html
Split tunneling must be configured on the Cisco VPN termination device.  Do you know what the device is to which you are connecting?  e.g. Cisco ASA 5545

Do you have administrative control of the device?
Avatar of vmich

ASKER

No unfortunately I don't have that info..
Then you will likely have to make a request to the administrator of the device to enable split tunneling.  This will stop your public internet bound traffic from being encrypted and sent across the VPN.  Instead it will exit your default gateway as normal and only interesting traffic will be sent across the VPN.

If their company policy stops them from enabling split tunneling, they may be able to pass your internet traffic through their GW instead...
If their company policy stops them from enabling split tunneling, they may be able to pass your internet traffic through their GW instead...

Split tunneling is actually considered to be a security violation by a lot of compliance standards like SSAE16 and ISO 27002. The big risk is that your computer can become a gateway between the protected and unprotected network. To minimize the risk, companies issue locked down laptops to remote users, do pre-login checks and etc.

On ASA with full tunnel VPN (if the same ASA is used for Internet and VPN), they need to enable hair pinning and setup NAT/ACLs to allow internet access.
ASKER CERTIFIED SOLUTION
Avatar of vmich
vmich
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of vmich

ASKER

new ip address