ASA Anyconnect restrictions for Split Tunneling Network List

[asalanov1987]

Hello,

I have a question. We use Cisco ASA 5520 firmware version 9.1.1 with set up SSL VPN Anyconnect(Anyconnect client version 2.5.605).

We use large Split Tunneling access-list with 200 entries ACE.

If I add more than 200 entries in the access-list and then I connect to the VPN and after this we will see that only 200 entries have been added in the route table.

So, my question is...There is a limit for Split Tunneling ACL when using Anyconnect client?

Thanks,

[Michael Muenz]

I'd try to contact Cisco directly for such a Q, but it would be better to summarize networks for saving entries.

Michael

Please rate all helpful posts

[Jeet Kumar · Accepted solution]

Hi,

This is very well document in one of internal bug at Cisco . Unfortunately, as it
is internal I will not be able to share the same with you. 

The only workaround available as of now is to combine your networks and make
the list as small as possible covering all the required network you need
which is less than or equal to 200

Thanks

Jeet Kumar

[asalanov1987]

Hello,

Thank you for your response. We will take this into account in our work.

Are there any plans to fix this bug in the new release ASA?

[nmfoxton]

Has this bug been resolved or changed?

I am currently experiencing possile issues with split tunnelling Office365 and Ms Teams.

The Standard ACL has 120 lines but AnyConnect only shows 112.

Also the ACL for the Firewall is over 120 lines but showing less on AnyConnect.