One of my customers as a multiple Client VPN tunnels on a Pix Firewall, each tunnel as a restricted access only for some hosts. I would act in such a way that the remote client doesn't have internet and local network access directly while connected i...