Anyconnect on Android not doing Split Tunnel

[Silviu Pietris]

Greetings every1!

I am running into an annoying issue with the AnyConnect client for Android related to Split Tunnel.

Using a laptop with AnyConnect I am able to browse the Internet using the local laptop adapter. If I connect from an Android OS device, the split tunnel is no longer working and all of the traffic is sent through the tunnel. Looking on the routing table in Android - the 0/0 route is set for the tun0 adapter.

Is this the usual behavior? Can't this be overwritten by a special config or anything, except using a web proxy on the other end of the tunnel in order to provide connecting clients with Internet connectivity?

I am on ASA 5512--X with 8.6 and AnyConnect client downloaded from the Google Play (latest version)

Thanks and regards.

Silviu

[rvarelac]

Hi Silviu, 

Looks like the Android device might not be matching the same policy as the computer. 

You can double check the policies the VPN are matching with the following command on the ASA

Show vpn-sessionsdb detail anyconnect filter name <username> 

Hope it helps

-Randy-