Hi,In that case i will suggest you to disable Split-tunnel and ensure that all is tunnelled via VPN. In case you need internet access, use U-turn on the headend.

Hi,Well, I doubt that creating SNAT on ASA for 10.1.1.x to 10.1.1.x will help....unless you can share more details on what you intend to configure.As per your note,"we need PBR for some hosts on internet":- How many hosts are we talking about?- Do we...

Hi Shawn,You have posted your query in security community. Please re-post it in wireless community .....

Hi Don,I understand that you are able to send TCP traffic and that is what we ment by "inconsistant behaviour". If you look at the routing table on the client PC, you will find 2 routes to the same subnet, one directly connected and another via VPN c...

Hi,It seems that you are trying to ping the IP address from Vlan1 of the EzVPN client"#ping 191.1.1.155 source vlan1"crypto ipsec client ezvpn ez mode client Since you have configured EzVPN in client mode, you will not be able to ping "from or to" th...