Cannot get Anyconnect Hairpinning to work via FMC

[red2play]

We need our users to have a Whitelisted IP address to access certain content.  However, even when I choose "Allow all traffic over tunnel", I still can't get the Hairpinning to work.  How can I make this work?

 

 

 

[Rob Ingram · Accepted solution]

@red2play you intend to route traffic to public destinations through the VPN for your remote users?

You will need an auto NAT rule for the RAVPN network, the source and destination interface is your outside interface.

You will need an ACP rule to permit this traffic from the RAVPN network to those destinations.

If you still have a problem run packet-tracer and/or system support firewall-engine-debug from the FTD CLI to provide more information.