Cisco VPN client with internet

[mohamed sebaey]

Hello

I have a big problem , we have implemented Cisco VPN client to allow connect from outside to our internal servers . My issue that all users get access to internet during using Cisco VPN client. We used split tunneling , but still all VPN clients get access to internet. Any advise to prevent internet access through VPN client.

Thanks

[Marvin Rhoads]

The primary purpose of split tunneling is to allow the clients to access their local networks and maintain local Internet access.

If you don't want that then disable split tunneling and only give them routes to the servers or subnets that you want them to access while on VPN.

[mohamed sebaey]

Thanks so much for your answer , but my issue regarding internet access through my campus by VPN. I need to prevent internet access within my campus by VPN . I need only VPN users to access servers and got limited access for internet.

Thanks

[Marvin Rhoads]

You can add a VPN filter to your remote access VPN configuration to restrict what address and services clients may access.

Here is a guide to that feature.

[mohamed sebaey]

Hello

i applied the below

access-list vpnfilt-ra extended permit ip 172.10.0.0 255.255.255.240 host 10.0.0.50
access-group vpnfilt-ra in interface outside 

but still vpn users able to access internet , how can i block internet access for vpn users.

Any help

[Marvin Rhoads · Accepted solution]

Earlier you said you were allowing split tunnel. Are you still doing that?

We'd need to see all of the VPN configuration - including any access-lists or objects it references - to provide complete guidance.

[mohamed sebaey]

hello

thanks , i will delete split-tunnel and enable only vpn filter tunnel and i will share with you all configuration soon.

Thanks

[mohamed sebaey]

thanks a lot, now it is working as we need.