Domains over Split tunnel RA VPN

Use case: Split tunnel remote access VPN

 

In split tunnel VPN most of the times we are passing clients networks (most of the times private addresses) over the tunnel. That means that the remote workers they are using their local internet line to access the internet.

 

What if they want to “pass” some urls over the tunnel? Most of the cases that happens if the specific destination need to be accessed from the gateway address.

 

 

The solution for this is Dynamic split tunnelling.

 

This can be configured from group-policy > Anyconnect  > Custom Attributes > +

 

Select Dynamic Split tunnelling

And then Add the url need to be accessed over the split tunnel.

*Reminder to allow this traffic from VPN filter if used and access controll used if sysopt connection permit-vpn is enabled

Documentation