Hi:
I have a need to setup split tunneling where by 99.9% of the traffic needs to go through the tunnel and the other 0.1% can not. Therefore I created a group policy and under Advanced -> Split Tunneling I set
Policy: Exclude Network List Below
Network List: split_tunnel_exclusion
I then created the split_tunnel_exclusion ACL and added one entry to it for testing (74.125.239.132, which happens to be a Google IP). However, when I connect via AnyConnect all traffic is still routed through the tunnel (looking at the route map on the system the default gateway is the tunnel IP, there is no network or host specific route for what I defined in the ACL). I tried setting the action on the ACE in the ACL to permit or deny but neither had any affect.
If I switch the policy to Tunnel Network List below then only that entry (74.125.239.132) is tunnel (host route entry added to route table) whereas all other traffic doesn't go through the tunnel.
So what I need is for it to work the other way, which I thought should just be changing the Policy as I originally did.
Thanks
