topic access lists for vpn site to site in Network Security https://community.cisco.com/t5/network-security/access-lists-for-vpn-site-to-site/m-p/1946070#M436778 <HTML><HEAD></HEAD><BODY><P>Hi Carl, </P><P></P><P>Yes. Supposingly your flows that should be tunneled are initiated only from remote Office to HQ , the source Remote Office and Destination HQ. </P><P></P><P></P><P>Dan</P></BODY></HTML> Wed, 16 May 2012 10:50:56 GMT Dan-Ciprian Cicioiu 2012-05-16T10:50:56Z access lists for vpn site to site https://community.cisco.com/t5/network-security/access-lists-for-vpn-site-to-site/m-p/1946069#M436777 <P>Hi all</P><P></P><P>Quick question, if I set up an office with a asa to my head office using a site to site tunnel, and i only want users to go across the tunnel and not be allowed internet,</P><P></P><P>whats the best access rule to set up, would it just be source as remote office and destination to the remote subnets in my HQ ?</P><P></P><P>cheers</P><P></P><P>Carl</P> Mon, 11 Mar 2019 23:07:41 GMT https://community.cisco.com/t5/network-security/access-lists-for-vpn-site-to-site/m-p/1946069#M436777 carl_townshend 2019-03-11T23:07:41Z access lists for vpn site to site https://community.cisco.com/t5/network-security/access-lists-for-vpn-site-to-site/m-p/1946070#M436778 <HTML><HEAD></HEAD><BODY><P>Hi Carl, </P><P></P><P>Yes. Supposingly your flows that should be tunneled are initiated only from remote Office to HQ , the source Remote Office and Destination HQ. </P><P></P><P></P><P>Dan</P></BODY></HTML> Wed, 16 May 2012 10:50:56 GMT https://community.cisco.com/t5/network-security/access-lists-for-vpn-site-to-site/m-p/1946070#M436778 Dan-Ciprian Cicioiu 2012-05-16T10:50:56Z access lists for vpn site to site https://community.cisco.com/t5/network-security/access-lists-for-vpn-site-to-site/m-p/1946071#M436780 <HTML><HEAD></HEAD><BODY><P>I gather I will need to de-tick the box so the traffic going over the vpn doesnt bypass the access lists ?</P><P></P><P>or will i need to create a vpn filter ?</P></BODY></HTML> Wed, 16 May 2012 12:56:45 GMT https://community.cisco.com/t5/network-security/access-lists-for-vpn-site-to-site/m-p/1946071#M436780 carl_townshend 2012-05-16T12:56:45Z