Forcing VPN Login to use the TCP/IP stack

[bsoth]

I am trying to figure out how to keep my users from accessing other Intenet connections, but must use the VPN to use the TCP/IP stack. In other words, how can I enable the Laptops to be able to work off line, but if they require TCP/IP (Networking) then they MUSt log into the domain.

I have seen "start before Logon" but this does not prevent the user form disconnecting and using their Internet connection.

[irisrios]

Try configuring access list and apply these access list to crypto map command where you can prevent specific ip addresses from browsing.Refer the follwing URL for more information

http://cisco.com/en/US/products/ps6350/products_configuration_guide_chapter09186a008049d04c.html#wp1047283