smart tunnel restriction

[ofir-nissim]

hi all,

is there a way to limit smart tunnel per resource?

when a bookmark is used with smart tunnel the relay plugin tunnel all the requests from that browser , i would like to limit that

[Jason Gervia]

You can do this in ASA 8.(3)1, using smart tunnel tunnel policies:

http://www.cisco.com/en/US/docs/security/asa/asa83/configuration/guide/webvpn.html#wp1343034

But beware of all the NAT changes that occur in 8.3(1).

--Jason

[ofir-nissim]

any chance to do that with code 8.0?

[Jason Gervia]

You can filter access to internal resources, but if you want to not smart tunnel all the resources for that particular browser, you'd have to use 8.3(1).

--Jason

[dbgreekas]

jagervia wrote:
You can do this in ASA 8.(3)1, using smart tunnel tunnel policies:
http://www.cisco.com/en/US/docs/security/asa/asa83/configuration/guide/webvpn.html#wp1343034
But beware of all the NAT changes that occur in 8.3(1).
--Jason

Also don't forget to quadruple your RAM from 512 to 2GB.. It is mandatory for 8.3...