N2h2 filtering for VPN users

[harpereric]

I have a pix 515e with a VPN set up for the Cisco client. For users on my internal network we have an n2h2 filter server set up to block certain websites.

I was wondering if there is any way for users connected with the VPN client to have their web requests filtered as well. Since split tunneling is enabled the web requests are not sent over the lan. I'm pretty sure this is not possible with our current setup.

If not, is this possible with the addition on a VPN Concentrator to the network.

Any assistance would be appreciated.

Eric

[gfullage]

This is not possible with just a PIX terminating the tunnels, especially since you're using split tunnelling.

If you terminated the tunnels on a VPN3000 and did full tunnelling, then routed packets thru the PIX to the Internet then the PIX would use the N2H2 server just like any other outbound traffic.

[harpereric]

That's what I suspected, thanks for your help.