topic Re: SSL VPN in General Topics

SSL VPN

AMPAN2011 — Tue, 03 Jan 2012 17:31:37 GMT

I just started using PAN 2050 in production and confiuring ssl vpn. Issue is that after client computer connect to vpn, client computer loses all internet access. What makes ssl vpn to work so that client computer doesn't lose internet access locally and still access resources remotely (office reourses behind the PAN)?

Thanks

Re: SSL VPN

rmonvon — Tue, 03 Jan 2012 17:54:25 GMT

You need to configure split tunnelling in the setting for VPN client configuration. Instead of a default route (0.0.0.0/0) for all traffic to use VPN, specify the route you would like to use VPN for (i.e. 10.0.0.0/8).

Re: SSL VPN

AMPAN2011 — Tue, 03 Jan 2012 18:14:54 GMT

Will this make all of vpn clients use dns on the remote site? This is what I want to prevent

Thanks

Re: SSL VPN

rmonvon — Tue, 03 Jan 2012 18:26:40 GMT

You can define the DNS servers in the VPN configuration as well. Whenever the VPN connection is up, the client will use the DNS servers specified in the VPN config setting.

Thanks.

Re: SSL VPN

AMPAN2011 — Tue, 03 Jan 2012 19:22:12 GMT

Sorry I didn't have my question clear. Our remote office has a slow T1 line and I want to prevent all vpn client users to use that line after connecting to remote office. I prefer vpn users use their local ISP to access the Internet and just access remote resources while connecting to vpn. So will the split tunnel you mentioned solve this?

Re: SSL VPN

dburns — Tue, 03 Jan 2012 19:45:07 GMT

Yes split tunnel will fix what you are trying to do.

Thanks,

Dominic

Re: SSL VPN

AMPAN2011 — Tue, 03 Jan 2012 22:09:56 GMT

Just tried it and seems to be working. Thanks