Full tunnel over SSL VPN/SNX

[Martin_Raska]

Hello,

I am seeking advice how to configure Split/Full tunnel per user/user group. The connection to VPN is over SSL portal SNX extender.

Something like this.

FW-A

user group - A : full tunnel, no split tunneling

user group - B : split tunneling only

FW-B

user group - C : full tunnel, no split tunneling

user group - D : split tunneling only

environment is Multidomain with VSX and Maestro.

Thanks

[samir-brkic]

could you please provide more details on the purpose of configuring split/full tunneling per user/user group in your SNX SSL portal setup?

Could you please clarify whether you are using the Unified Access Policy or the Legacy Policy for your SSL rulebase?

Typically, with SNX SSL connections, when using the Legacy Policy, full tunneling may not be necessary as access is restricted to the specific applications allowed in the rulebase. This setup usually ensures that routing is managed according to the applications rather than requiring split or full tunneling.

[the_rock]

Last time I asked TAC about it, they said it was not possible/supported.

Andy