VPN 3015 Split tunnel conflicts with PIX

[kendo.igor]

We have a VPN 3015 behind a PIX firewall. Remote users come from the Internet, thru the PIX, connect to the VPN 3015 and access the LAN. Everything works fine if split-tunnel is not enabled on VPN 3015. Once I enable the split-tunnel, users can no longer connect to the LAN from internet.

However, if I connect a laptop directly to the external interface of VPN 3015 via a crossover cable, it also works fine even with the split tunnel enabled. Any idea?

[afakhan]

Hi,

there could be sth wrong with the pix config, please attach the pix config, and explain the topology a bit.

Thanks,

Afaq