This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

How do I disable split tunneling with Astaro SSL VPN?

I have setup a standard ASL v7.3 and enabled SSL VPN according to the guides and it works like a charm. [:)]

The problem is that we need to disable split tunneling for PCI DSS compliance. I have searched but I can't find any setting that disable split tunneling.

So, is it possible to disable split tunneling when using SSL VPN and how do I enable it?

// Andreas

This thread was automatically locked due to age.

Parents

0 AMros over 16 years ago

disabling split tunnel means ALL traffic goes trough the tunnel? - just select "ANY" as the local network on server site
rgds, a.
Cancel
Vote Up 0 Vote Down

Cancel
0 cyberknutte over 16 years ago in reply to AMros

Thanks!

I was looking for a setting like a checkbox. But this makes sense now when I know it. I just couldn't figure it out myself. I also saw this in the online help now. It would be nice if they could highlight the Split Tunneling words... would have saved me lots of time...

Thanks,
Andreas
Cancel
Vote Up 0 Vote Down

Cancel
0 BAlfson over 16 years ago in reply to cyberknutte

I could be wrong, but I thought the choice of split tunnel was the client's not the server's. Andre, my understanding is that this setting in the Astaro determines content of the configuration file for the client, and that a knowledgable user could change the client settings without the Astaro having any idea.

Cheers - Bob
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 BAlfson over 16 years ago in reply to cyberknutte

I could be wrong, but I thought the choice of split tunnel was the client's not the server's. Andre, my understanding is that this setting in the Astaro determines content of the configuration file for the client, and that a knowledgable user could change the client settings without the Astaro having any idea.

Cheers - Bob
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 BarryG over 16 years ago in reply to BAlfson

Yes, the client can often override the routes.

Barry
Cancel
Vote Up 0 Vote Down

Cancel
0 BAlfson over 16 years ago in reply to BarryG

Thanks for the confirmation. So, Andreas, that means your PCI requirement is a little different than what you were told. If you have any VPN server for Road Warriors, you cannot prevent the use of a split tunnel. If you have a site that's communicating to your office, the tunnel has to be defined as "full" on both ends.

Can you share with us the exact extract of the PCI review that found your installation was missing something?

Cheers - Bob
Cancel
Vote Up 0 Vote Down

Cancel
0 johannestd over 13 years ago in reply to BarryG

Yes, the client can often override the routes.

Barry

assuming that my network-users behave as they should, which settings need to be configured??

i´ve already set 'any' to the allowed 'local networks' (wich should include the WAN Peers) and implementd the recommended lines (https://support.astaro.com/support/index.php/SSL_VPN_Errors#SSL_client_connects_but_no_traffic_routes_.2F_Windows_Vista_error) to my openvpn config file and the vpn client runs as admin. my lowest metric route looks like this

Network Destination 255.255.255.255
Netmask 255.255.255.255
Gateway On-link
Interface 10.243.2.6 (VPN SSL Pool)
Metric 257 (lowest)

Am i missing something?

johannes
Cancel
Vote Up 0 Vote Down

Cancel