topic HI Mohammed in Network Security

AnyConnect Full Tunnel _internet Browsing issue

aneesh.at55 — Tue, 12 Mar 2019 09:23:55 GMT

HI Guyz

Seeks your valuable update regarding Anyconnect full tunnel configuration issue

All my configuration are perfect users are able to connect and all traffics are routed to ASA 5525 except they are unable to browse internet. assume mostly DNS related configuration issue which am not clear as am able to ping public internet IPs .even tried enabling DNS lookup on outside interface but result was negative

followed below link for configuration

http://www.cisco.com/c/en/us/support/docs/security/asa-5500-x-series-nex...

Under your group policy

Mohammed al Baqari — Mon, 22 May 2017 05:59:32 GMT

Under your group policy configuration, what is your split-dns configuration and split-tunnel-all-dns.

Try to apply these and test.

split-dns none
split-tunnel-all-dns enable

HI Mohammed

aneesh.at55 — Mon, 22 May 2017 06:25:33 GMT

HI Mohammed

Its not working .But seems if we modify command it can resolve my issue (If theory is correct). Pls help me even am trying from my side

Note: Its Full tunneling not split tunneling.User gateway is my ASA

Thanks

If you are using full

Mohammed al Baqari — Mon, 22 May 2017 06:39:45 GMT

If you are using full-tunneling, then you need this command under your group-policy and make sure that your clients can reach DNS server over the tunnel.

disconnect/connect after applying the command

**** please remember to rate useful posts

Thanks Mohammed Its working

aneesh.at55 — Mon, 22 May 2017 06:48:49 GMT

Thanks Mohammed

Its working