I get a delay and then the browser's "unable to connect" page, but only for the sites I listed above .
Still no cisco, facebook, yahoo, google, fark. Slashdot, lvrj, twitter, sunherald are OK.
If I do an anyconnect vpn with my tunnel all profile, I can do anything/go anywhere without a problem. My hosts on the inside are OK too, so I think that rules out DNS.
I'm going over my config for perhaps inspection or some other craziness and don't see anything there either:
dns domain-lookup outside
dns domain-lookup inside
dns server-group DefaultDNS
name-server Internal1 (Removed during later testing
name-server Internal2 (Removed during later testing)
name-server 8.8.8.8
name-server 8.8.4.4
domain-name internaldomain.local
same-security-traffic permit intra-interface
webvpn
enable outside
anyconnect image disk0:/AnyConnect-3.1.01065/anyconnect-win-3.1.01065-k9.pkg 1 regex "Windows NT"
anyconnect image disk0:/AnyConnect-3.1.01065/anyconnect-macosx-i386-3.1.01065-k9.pkg 2 regex "Intel Mac OS X"
anyconnect image disk0:/AnyConnect-3.1.01065/anyconnect-linux-64-3.1.01065-k9.pkg 3 regex "Linux"
anyconnect image disk0:/AnyConnect-3.1.01065/anyconnect-linux-3.1.01065-k9.pkg 4 regex "Linux"
anyconnect enable
tunnel-group-list enable
ssl-server-check warn-on-failure
group-policy VPN_SSL internal
group-policy VPN_SSL attributes
dns-server value (INTERNAL DNS servers, also tried 8.8.8.8 and 8.8.4.4)
vpn-tunnel-protocol ssl-client ssl-clientless
split-tunnel-policy tunnelspecified
split-tunnel-network-list value Split_Tunnel_ACL
default-domain value internaldomain.local
webvpn
url-list none
anyconnect ssl dtls enable
anyconnect dpd-interval client 10
anyconnect dpd-interval gateway 30
anyconnect ask none default webvpn
tunnel-group VPN_SSL type remote-access
tunnel-group VPN_SSL general-attributes
address-pool VPN_Pool
default-group-policy VPN_SSL
tunnel-group VPN_SSL webvpn-attributes
group-alias SSL_VPN enable
tunnel-group-map default-group VPN_IPSEC
