Remote Access VPN users connect but cannot access internal resources

[BEHowardGRDA]

I've been having intermittent remote access VPN issues.  I have some users that can connect and never have issues, but most users can connect to our 5520 ASAs, but they are unable to access the resources that have been allowed using split tunneling.  The ASAs are also hosting Site-to-Site VPn connections, but I've verified that they do not overlap with addressing, etc for the remote users.

[Federico Coto Fajardo]

Hi,

A quick test is to PING the inside IP of the ASA from the remote VPN client.

Since you have the command ''management-access inside'' in the configuration you should be able to do this.

Also check that the internal LANs have a route back to the ASA when replying to the VPN range.

Also check you have:

cry isa nat-t

sysopt connection permit-vpn

Federico.