We are running Cisco 1140 FTDs and recently updated to version 7.4.2.1. I noticed that while going back through configs, that in the remote access configuration, if you go to edit the group policy, there is now a red exclamation point for the split tunnel configuration and that you now cannot provide a standard access list as the network list type. However, if I make a change in the standard access list for the split tunnel, it still works and goes through. Do I need to make a new extended ACL? I cannot find any documentation that this has been changed.
To clarify, We are using a standard ACL to denote what traffic uses the split tunnel. When it was originally configured, the pictured settings allowed me to select standard ACL and select our standard ACL that we use. However, since updating to the new version, it now will not accept a standard ACL, it wants me to select an extended ACL. However, when I make changes to the standard ACL, it still works and does as configured. So obviously, it is using a standard ACL, even though in the settings it shows that it is no longer going to accept a standard ACL. What I really want to know is if I make a change to our Remote Access settings, will this take my existing split tunnel down?
Accepted Solutions
You have to change IPv6 Split Tunneling to "Allow all traffic over tunnel".
Afterwards you´re able to use Standard ACL as well:
You have to change IPv6 Split Tunneling to "Allow all traffic over tunnel".
Afterwards you´re able to use Standard ACL as well:
