ASA VPN traffic exception

[Tauer Drumond]

Hi all,

I have a VPN site-to-site configured sucessully on CISCO ASA

The local network is 192.168.0.0/24 and the remote network is 0.0.0.0 (any)

But, now I need that a traffic to a specific destination doesn't enter that tunnel. It can not flow through the VPN tunnel

Is that possible? How do I accomplish that?

[Rob Ingram · Accepted solution]

Hi,
Modify your crypto ACL that defines the interesting traffic for the VPN, enter a new entry above the existing entry, deny traffic from your local network (192.168.0.0/24) to your new destination.

HTH

[Tauer Drumond]

Yes, it worked! Thank you