Cisco AnyConnect does not use group policy (split-tunnel)

[Marco Serato]

Hello

We use Cisco ASA with AnyConnect. This works well.

Now I want to use the feature split-tunnel for one local address.

The group policy is defined and works with my AnyConnect client. But at one customer the group policy is not used. In the ASA session details I can see the group policy is used. But in the Route Details (AnyConnect) are no split-tunnel unsecure destinations. Only a default route to tunnel all traffic. If I use the group policy I can use it as designed.

Are there any local settings in Cisco AnyConnect?

Greetings Marco

[mclaughlinm9]

Can you please post a sanitized config? Also can you show it working on your client and the client that is not, from both the client side and the ASA?