Hi guys,
i am wondering about a specific behavoir of Anyconnect on Windows 10 machines.
While using Full-Tunnel mode on Windows 7 and earlier, communication of the host with himself was possible,
e.g. TCP 127.0.0.1:44337 to 127.0.0.1:44338 --> was permitted
Same configuration of Anyconnect on same ASA blocks communication between localhost & localhost when the Host is a Windows 10 machine. The only workaround which worked for me was to set a splitt tunnel in Group-Policies which allows 0.0.0.0/32. This had the bad side effect that all local hosts are allowed and my full tunnel is gone.
Adding 127.0.0.1/32 to splitt tunnel is not working :(
This type of communication is used in various Adobe Software. Does anybody know how to solve this without setting up a splitt tunnel ACL ?
The goal is to keep the full tunnel and deny local hosts when Anyconnect is started.
Best Regards
Ayhan
