Split Tunneling on Cisco IPSec VPN

#1

Post by shadykiller » Mon, Aug 12, 2013, 9:21 AM UTC

Split Tunneling on Cisco IPSec VPN
shadabahmed.com

Re: Split Tunneling on Cisco IPSec VPN

#2

Post by robinson-wall » Mon, Aug 12, 2013, 10:18 AM UTC

Cisco IPSec endpoints are more than capable of split horizon (split-DNS too) without having to bodge it on the client side.

If it isn't configured then netsec doesn't want split horizon. There is likely a company policy that if you are attached to their network, you are only attached to their network.

Re: Split Tunneling on Cisco IPSec VPN

#3

Post by shadykiller » Mon, Aug 12, 2013, 10:30 AM UTC

robinson-wall wrote: post #2

Cisco IPSec endpoints are more than capable of split horizon (split-DNS too) without having to bodge it on the client side. If it isn't configured then netsec doesn't want split horizon. There is likely a company policy that if you are attached to their network, you are only attached to their network.

Yes, this is a company policy. The method just a way to subvert that

Re: Split Tunneling on Cisco IPSec VPN

#4

Post by bastag3 » Tue, Aug 13, 2013, 5:27 AM UTC

shadykiller wrote: post #3

robinson-wall wrote: post #2

Cisco IPSec endpoints are more than capable of split horizon (split-DNS too) without having to bodge it on the client side. If it isn't configured then netsec doesn't want split horizon. There is likely a company policy that if you are attached to their network, you are only attached to their network.

Yes, this is a company policy. The method just a way to subvert that

And if it's worth its salt will disconnect you once it sees the routing change.