<div>
Check your split tunnel settings:<br />
<br />
<a href="https://www.cisco.com/c/en/us/support/docs/security/asa-5500-x-series-next-generation-firewalls/70847-local-lan-pix-asa.html" rel="ugc">https://www.cisco.com/c/en/us/support/docs/security/asa-5500-x-series-next-generation-firewalls/70847-local-lan-pix-asa.html</a><br />
<br />
This is the main (only?) variable that permits Internet outside the tunnel when VPN is active. <br />
<br />
I assume you are using IPsec and not PPTP VPN.
</div>


Check your split tunnel settings:

https://www.cisco.com/c/en/us/support/docs/security/asa-5500-x-series-next-generation-firewalls/70847-local-lan-pix-asa.html [https://www.cisco.com/c/en/us/support/docs/security/asa-5500-x-series-next-generation-firewalls/70847-local-lan-pix-asa.html]

This is the main (only?) variable that permits Internet outside the tunnel when VPN is active.

I assume you are using IPsec and not PPTP VPN.

<div>
1. How old is the code on the head end device?<br />
<br />
2. What subnet are you leasing to the remote clients?<br />
<br />
<br />
<br />
Pete
</div>


1. How old is the code on the head end device?

2. What subnet are you leasing to the remote clients?



Pete

<div>
Split tunnel settings look good.<br />
<br />
@Pete, what do you mean how old is the code? are you referring to the software version number? /24 subnet.
</div>


Split tunnel settings look good.

@Pete, what do you mean how old is the code? are you referring to the software version number? /24 subnet.

<div>
<div class="content wysiwyg-content">
Hi Guys,<br />
<br />
Certain users are reporting that they are unable to route to public internet when they are connected to VPN. We have a split tunnel. Some users are able to, others aren't. I have no idea where to look. Any help will be appreciated.
</div>
</div>


Hi Guys,

Certain users are reporting that they are unable to route to public internet when they are connected to VPN. We have a split tunnel. Some users are able to, others aren't. I have no idea where to look. Any help will be appreciated.

Cisco VPN AnyConnect

Cisco PIX is a dedicated hardware firewall appliance; the Cisco Adaptive Security Appliance (ASA) is a firewall and anti-malware security appliance that provides unified threat management and protection the PIX does not. Other Cisco devices and systems include routers, switches, storage networking, wireless and the software and hardware for PIX Firewall Manager (PFM), PIX Device Manager (PDM) and Adaptive Security Device Manager (ASDM).

Cisco

A virtual private network (VPN) is a network that uses a public telecommunication infrastructure, such as the Internet, to provide remote offices or travelling users access to a central organizational network securely. VPNs encapsulate data transfers using secure cryptographic methods and other security mechanisms to ensure that only authorized users can access the network and that the data cannot be intercepted.