Hi, Can you check if you have an old show tech to confirm whether the Anyconnect Essentials license was perpetual or was it time based. The license could have been time based and time might have expired and hence it is disabled now. Regards, Nitish...

Hi, It is possible to configure split tunneling. here is the document/discussion on it please go through it https://supportforums.cisco.com/discussion/10812051/windows-l2tp-vpn-clients-no-internet-access-split-tunnel-not-working

Hi Steve, You are missing nat exmeption for this traffic hence the traffic is getting natted while hitting this statementstatic (inside,outside) 170.27.201.221  access-list PCC_SEQOUIA_PNAT_2 Please add nat exmeption.

Hi,You seem to have this nat (inside,outside1) source dynamic VLAN1 interface at line 2 which is causing the identity Nat/ Nat exempt to fail.It is always good to use the packet tracer feature on the ASA to see what exactly is happening.Try this nat ...

hi, Try this thencrypto dynamic-map dynmap 1 set ikev1 transform-set MyRAcrypto dynamic-map dynmap 2 set ikev1 transform-set myset  This should do it for you. Regards,Nitish Emmanuel