Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

Possible Duplicate:
How to use one connection to the internet for VPN and another for accessing other websites?

I use the Cisco Any Connect VPN client, version 2.5.2011, for work. My company also uses a draconian firewall called "IronPort" for all traffic — including SSL traffic — on my work domain.

I just use a VPN tunnel for remote desktop connections. Is there any way to force all other traffic through my local connection and not the tunnel? The problem is, as soon as I connect to the VPN, my local browser has to go out Ironport and Websense.

My computer is running Windows 7 Home Premium.

share|improve this question

marked as duplicate by harrymc, Kyle, Ƭᴇcʜιᴇ007, random Oct 18 '11 at 3:59

This question has been asked before and already has an answer. If those answers do not fully address your question, please ask a new question.

1 Answer 1

up vote 2 down vote accepted

Like Harrymc points out in the linked question in his comment, you need to look into "split-tunneling" to get your computer to use your local gateway instead of the company's gateway (through the VPN) to get out to the Internet. But having said that...

The Cisco Any Connect VPN client can be (and usually is) configured from the server-side by the IT staff. They have to allow you to be able to split-tunnel, and they can hard-set it to not allow other Internet access while the VPN is connected (more secure, as it disallows you letting 'nasties' in on your Internet connection, and then into their network through the VPN, bypassing their public firewalls, anti-malware solutions, etc. So, you'll very likely have to talk to the folks in charge of the 'other end' of that VPN to get it working.

share|improve this answer
    
I think this is wrong. As long as your user is the local Admin, you can always set your own routes no matter how the VPN client messes it up. Unless the client takes over the system's stack, you can always use the way suggested by Kyle to bypass any restrictions. –  billc.cn Oct 17 '11 at 23:54
    
There might be a way to do this if hacked properly, but bottom line is I've talked to our networking guys and it would be a violation of our security policies so I guess I have to throw in the towel on this one :( –  javamonkey79 Oct 18 '11 at 0:22

Not the answer you're looking for? Browse other questions tagged or ask your own question.