Cisco AnyConnect - VPN taking over entire internet connection

Hi experts,

I connect to VPN to a clients environment via Cisco AnyConnect Secure Mobility Client.  Once connected I then remote desktop into the machine at the client and I can work etc.

Whenever I do this I lose all internet access from the laptop I connect through at my home.  So I can't have an email client running locally as it will not connect to email server.  I can't minimize the remote desktop and browse internet with a local browser.  It's like it completely takes over my internet for some reason.

So I created a new VM via VMWare and thought I would just use the VM to vpn into the client as the VM should share the internet connection.   To my surprise, even when I do that, the internet will not work on my local machine.  The VM completely takes over my entire internet once I connect to Cisco AnyConnect.

I figure this is probably security related but is there anywhere or any setting I can do so it shares the connection?

Or in VMWare something where it won't allow it to take over entire connection?

Thanks for any inisight.
elwayisgodAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

BAYCCSMSPCommented:
This sounds like a setup with the vpn, have your admin check to see if split tunneling is setup on the ASA.

https://www.cisco.com/c/en/us/support/docs/security/asa-5500-x-series-next-generation-firewalls/70847-local-lan-pix-asa.html
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
JohnBusiness Consultant (Owner)Commented:
Make sure Split Tunneling is ON and if you are connecting to PPTP, consider trying IP Sec.

I use VPN (Split Tunneling) and I use Internet simultaneously all the time.
0
Pete LongTechnical ConsultantCommented:
As pointed out this is default behaviour :)
Cisco ASA – Enable Split Tunnel for IPSEC / SSLVPN / AnyConnect Clients
And as you point out it's a security feature, you cant fix it at the client end, it needs to be enabled on the 'head-end' (Cisco ASA or ISR).

Pete
0
Determine the Perfect Price for Your IT Services

Do you wonder if your IT business is truly profitable or if you should raise your prices? Learn how to calculate your overhead burden with our free interactive tool and use it to determine the right price for your IT services. Download your free eBook now!

Get Your eBook
elwayisgodAuthor Commented:
Thanks for comments.  I'll ask the question, but I think I know what they are going to tell me :)
0
elwayisgodAuthor Commented:
OK.  New information as I was incorrect in my testing.

  1. When I connect to vpn client in the VM only and not via my host, it does share the connection.  So I can minimize the VMWare Workstation and use my laptop as normal.   I can browse internet etc.   I tested sending emails back and forth between my personal email client and the companies email within the vpn connection.
  2. When I connect vpn directly from my laptop withiout using the VM i created, it takes over entire connection.

Thus, I believe I'm good to go as this was my goal.  Use a VM to vpn to client system and not lose my connection to my personal email.



Thanks for all the replies as I know when I ask them if they can allow tunneling, they will tell me to go fly a kite :)
0
elwayisgodAuthor Commented:
Really confused on how to award equal points here.   I think something has changed since I have used EE last.  I'll revert to first response on this one until I figure this out.
0
JohnBusiness Consultant (Owner)Commented:
Thank you and I was happy to help you.  Yes EE has changed the way questions work. You can check their help documentation.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Cisco

From novice to tech pro — start learning today.