disable local lan connects on anyconnect vpn on asa 5510

[goran ljubic]

i configured anyconnect on my firewall the asa 5510 and all is ok, but i have a problem. the users from my local lan also connects on anyconnect vpn, but i don't want this feature. how disable local lan connects on anyconnect vpn on asa 5510?

[balaji.bandi]

You can split tunnel for the local VLAN is that works ?

[goran ljubic]

you think that i put my local VLAN in split tunnel?

[goran ljubic]

my local networks is behind core switch, so i have many vlans. i want disable all users connect on anyconnect vpn from those vlans

[Aref Alsouqi]

With split tunnel you can define the networks you want to protect, which means what traffic you want to send over the VPN tunnel from the clients. If you are doing tunnel all, that will send everything from the client side over the VPN tunnel.

You can also set the VPN filtering for AnyConnect, that will allow you to define what accesses are allowed to the local subnets, and on which ports.