SSL VPN

[AMPAN2011]

I just started using PAN 2050 in production and confiuring ssl vpn.  Issue is that after client computer connect to vpn, client computer loses all internet access.  What makes ssl vpn to work so that client computer doesn't lose internet access locally and still access resources remotely (office reourses behind the PAN)?

Thanks

[rmonvon]

You need to configure split tunnelling in the setting for VPN client configuration.  Instead of a default route (0.0.0.0/0) for all traffic to use VPN, specify the route you would like to use VPN for (i.e. 10.0.0.0/8).

[AMPAN2011]

Will this make all of vpn clients use dns on the remote site?  This is what I want to prevent

Thanks

[rmonvon]

You can define the DNS servers in the VPN configuration as well.  Whenever the VPN connection is up, the client will use the DNS servers specified in the VPN config setting.

Thanks.

[AMPAN2011]

Sorry I didn't have my question clear.  Our remote office has a slow T1 line and I want to prevent all vpn client users to use that line after connecting to remote office.  I prefer vpn users use their local ISP to access the Internet and just access remote resources while connecting to vpn.  So will the split tunnel you mentioned solve this?

[dburns]

Yes split tunnel will fix what you are trying to do.

Thanks,

Dominic

[AMPAN2011]

Just tried it and seems to be working.  Thanks