Cisco Any connect VPN not allowing access to printer on Local LAN.

[SujanThapa]

I am using a Printer at home connected with wifi.

I need to connect VPN and do print but not working even I checked Local LAN access.
I am having this issue on latest VPN client 4.x

[balaji.bandi]

are you able to print before with OLD any connect client?

[SujanThapa]

Thank you, Balaji

I have 2 machines one has version 3.1.x.x   and another has 4.1.x.x.
3.1.x version has no issue but 4.1.x has this issue.

[MHM Cisco World]

Need tunnel excluded,

https://www.cisco.com/c/en/us/support/docs/security/asa-5500-x-series-next-generation-firewalls/70847-local-lan-pix-asa.html

[SujanThapa]

In my scenario, I find the solution using the older version of anyconnect client but still don`t know the cause why 

Anyconnect 4.7.04056 has this issue. 
I did compared the route that also seems fine.

[balaji.bandi]

so 4.7 work and 4.9 break, good TAC will know what is this causing issue. thanks for the feedback and glad all going good at your side.

[SujanThapa]

Thank you for your continuous support Balaji.

Just correction.

CiscoAnyconnect Version3.1.05187  (Network printing, Local Lan access -working)

CiscoAnyconnect Version4.7.04056  (Network printing, Local Lan access - not working)

[balaji.bandi]

i would cross-check XML file both 3.1 and 4.7 see the difference 

also worth checking and diagnosis the issue, when you printing what is the Logs you see both ASA  and client? (for me Looks like it going to full tunnel to ASA and it dropping there)

https://www.cisco.com/c/en/us/support/docs/security/asa-5500-x-series-next-generation-firewalls/70847-local-lan-pix-asa.html

Due to that version was old, i can not simulate the issue. 3.1 is too old.

[MHM Cisco World]

the only thing I see is the any connect profile, can you check if both use same profile or each one use different.

[SujanThapa]

Both are the same profile. 
For now, we cannot use 3.1 version because of end of support but still unknown about the reason.
Do anyone have same issue on 4.7 version.

[MHM Cisco World]

can you check this in client, this is location of profile check if the local LAN is true or not 
C:\ProgramData\Cisco\Cisco AnyConnect Secure Mobility Client\Profile