split tunnel or reverse split tunnel 2

[cambo2k]

I am fairly new to PIX firewalls and am hoping someone can help me out.
I have a remote site with a PIX 501 that creates a VPN tunnel into our data centre Cisco 3000 series.
All of my internet traffic from the machines behind the PIX is sent through my Proxy
>url-server (outside) vendor websense host 10.x.y.z timeout 5 protocol TCP version 1
>http server enable
On site they have a specific application that requires access to the internet for live data from a 3rd party company.
I was hoping that either a split tunnel (or reverse) would work to not have this internet traffic go out the PIX to the data centre and then back to the client.
I would like to allow traffic to that specific IP address to go right out to the internet by passing the tunnel and reducing the traffic on the VPN.
The PIX 501 is not being used as a DHCP device as there is a server behind the PIX for that.
So the real questions are: can this be done? and if this can be done do you have an example that you could share with me so i can understand how this is done.
Thanks!
CS

 

[CHOUM]

You can do lot of things with PIX.
Can you give us more infos about your topology?
I don't know cisco 3000, i work with cisco ASA, reverse split tunnel work great
you specify networks or hosts allowed to go out (no through VPN).

PIX 501/515
ASA 5510

 

[BuckWeet]

Check out the EzVPN feature on the PIX.

Makes VPN life simpler..


BuckWeet

 

[cambo2k]

Topology: Cisco 3000 series VPN concentrator to authenticate users of the VPN client and PIX devices from our remote sites.
PIX501 in smaller remote locations that I want all internet traffic pushed out through the VPN except one or 2 sites that are high bandwith and i would like them to go right out the internet connection.

I will also check out the EzVPN feature on the PIX.

Thanks!

 

[lgarner]

Exclude that traffic from the crypto ACL on the Pix. Only traffic which matches the ACL is tunneled.