Can a split tunnel pose a security risk ??

[cketan]

Hello,

Wondering if setting up split tunnel for vpn clients using vpn client 3.0 to pix 515 using wild card mode-config can pose a security risk ?

Regards...Ketan

[travis-dennis_2]

In my never-too-humble opinion Split-tunnel is a huge security risk and should be avoided if at all possible. Very few reasons I can think of to allow it although I have had to allow it recently when a user was given access to our VPN to get to an internal FTP server but had to transfer data from across their WAN. Other than something like this I wouldn't do it at all.

[mikgriff]

"Usually" split mode is used for traffic management and not as a security feature....If you do not need to do it then dont...