Limited Resources accessible through VPN tunnel

[dbuckley77]

I have an IPsec vpn tunnel setup between an ASA 5505 on our end and a sophos on our associates end.  We are having several issues.  The first is that I defined our network that they can access as Ip address 10.100.x.x through 10.100.x.x but they can only access .x and .x  I used the VPN setup wizard and created a group policy also.  I did not create any access rules independnetly as it was my understanding that specifying the remote and local networks while setting up the VPN took care of this.  Also the associate cannot initiate the tunnel only we can.  I have pasted the ASA config below and would appreciate any help.  the tunnel in question is the x.x.x.x. tunnel  Thanks

[Richard Bradfield]

Hi,

your ACL used for the crypto map shown below must be mirrored at the remote site

access-list outside_2_cryptomap extended permit ip object-group Lawson_VPN host Lawson_VPN_External

now the object group Lawson_VPN, has the individual hosts so the ACL will have many entries.

It would be easier if you had an

object Lawson_VPN _subnet 

network 10.100.6.64 255.255.255.248

and used that

HTH

Richard.