Hello We are on anyconnect 4.9 and ASA 5516. When users are connected to VPN using anyconnect, we want to maintain split tunneling and deny access to their local Lan (or access to corporate laptop from local lan), is this possible?

  We can into a strange problem. As above, it's a simple S2S VPN tunnel.  On our side, Node1 is primary, Node2 is secondary but connection is always established through cluster IP. There was a failover, so Node2 is primary and Node 1 is secondary. Im...

We are on Cisco ASA 5516. There is an interface 10.50.70.0/23 on the firewall and it has outbound access list set to 'permit any'. But there is no NAT configured for this interface. Yet, systems behind this interface are able to access internet, how ...

Is there a way to configure a custom access denied message when CIsco anyconnect is configured using DUO LDAPS?