Hello,
I am trying to block vpn/tunnel traffic and finding that no policy is able to block the vpn traffic. All ports other than TCP port 80 and 443 are blocked for the client by the ASA so the vpn tunnels through port 443. The access policy I have setup has a rule to block and reset the vpn/tunnel traffic, but it made no difference. I then enabled an ssl policy to decrypt and resign, and when I go to the browser on the mobile device I get a certificate error, but yet the vpn client continues to pass right through the policy.
Is there any way to troubleshoot a connection like this?
Thanks,
Dan.
