up vote 1 down vote favorite
share [g+] share [fb]

Possible Duplicate:
How to use one connection to the internet for VPN and another for accessing other websites?

I use the Cisco Any Connect VPN client, version 2.5.2011, for work. My company also uses a draconian firewall called "IronPort" for all traffic — including SSL traffic — on my work domain.

I just use a VPN tunnel for remote desktop connections. Is there any way to force all other traffic through my local connection and not the tunnel? The problem is, as soon as I connect to the VPN, my local browser has to go out Ironport and Websense.

My computer is running Windows 7 Home Premium.

link|improve this question
85% accept rate
1  
you need to set a static route to your gateway at home (IE 192.168.1.1) for all traffic (0.0.0.0) then set a static route for for your works subnet to the gateway on the SSL VPN. Without knowing your companies IP range and your IP range it is impossible for me to give you an example of this. You can look at your current routes by typing route print into cmd, this might help lead you in the right direction. – Kyle Oct 17 '11 at 17:16
feedback

closed as exact duplicate by harrymc, Kyle, techie007, random♦ Oct 18 '11 at 3:59

This question covers exactly the same ground as earlier questions on this topic; its answers may be merged with another identical question. See the FAQ for guidance on how to improve it.

1 Answer

up vote 2 down vote accepted

Like Harrymc points out in the linked question in his comment, you need to look into "split-tunneling" to get your computer to use your local gateway instead of the company's gateway (through the VPN) to get out to the Internet. But having said that...

The Cisco Any Connect VPN client can be (and usually is) configured from the server-side by the IT staff. They have to allow you to be able to split-tunnel, and they can hard-set it to not allow other Internet access while the VPN is connected (more secure, as it disallows you letting 'nasties' in on your Internet connection, and then into their network through the VPN, bypassing their public firewalls, anti-malware solutions, etc. So, you'll very likely have to talk to the folks in charge of the 'other end' of that VPN to get it working.

link|improve this answer
I think this is wrong. As long as your user is the local Admin, you can always set your own routes no matter how the VPN client messes it up. Unless the client takes over the system's stack, you can always use the way suggested by Kyle to bypass any restrictions. – billc.cn Oct 17 '11 at 23:54
There might be a way to do this if hacked properly, but bottom line is I've talked to our networking guys and it would be a violation of our security policies so I guess I have to throw in the towel on this one :( – javamonkey79 Oct 18 '11 at 0:22
feedback

Not the answer you're looking for? Browse other questions tagged or ask your own question.