PIX 515 - VPN - Internet access

[mknoxwfc]

Can anyone tell me how I can set up a VPN client(3.5) connected into a PIX 515 (6.1.1) to access the Intenet while connected to the PIX VPN?

We are using an Internet dialup and connecting to the VPN but lose the Internet connectivity while the VPN is active. I have heard this is a security feature. Is it possible to access the Internet through the VPN pipe?

Thanks

Michael

 

[yizhar]

HI.

There is the "split tunnel" option.
It will cause the client to use the VPN only for access to the internal network behind the pix, and the client will use direct connection to ISP for accessing the Internet.

The connection to the Internet is NOT via the VPN tunnel.

You configure this with an access-list and the "vpngroup" command with the "split-tunnel" option.
See CISCO docs and samples.

Bye
Yizhar Hurwitz

http://come.to/yizhar

http://teachers.sivan.co.il/yizhar

 

[mknoxwfc]

Worked like a charm.

Thanks