Hello,
Couldn't locate similar posts in support forum so creating new discussion...
ASA 5510 SSL VPN with AnyConnect - all seems to be good with only one issue:
- clients can't browse Internet when VPN connected from within the Office LAN itself.
So clients connect from LAN to the same LAN via VPN. Let's say for testing purposes.
LAN access goes via the tunnel then and does it good.
Internet access - no go. No DNS resolution for domains other than mentioned in split-dns as:
- Internet host resolving is directed not to be tunneled;
- So DNS server from the LAN interface is chosen for resolving and sent DNS query to;
- As this DNS server resides on the LAN the DNS query should be tunneled, right?
- ... what happens next?
DNS server can ping the VPN connected client and client can ping back to DNS server so sending-answering a DNS query shouldn't be an issue?
VPN connected client can ping Internet hosts.
What might be the problem here? NAT? Firewalling? I can't see any trace of DNS queries in the ASA monitoring (Realtime Log Viewer)...
Thanks in advance for all the answers,
Yev
