Specifying Address Translation Exception And Split Tunneling - Cisco ASA 5505 Getting Started Manual

Chapter 7 Scenario: IPsec Remote-Access VPN Configuration
Implementing the IPsec Remote-Access VPN Scenario

Specifying Address Translation Exception and Split Tunneling

Split tunneling enables remote-access IPsec clients to send packets conditionally
over an IPsec tunnel in encrypted form or to a network interface in text form.
The adaptive security appliance uses Network Address Translation (NAT) to
prevent internal IP addresses from being exposed externally. You can make
exceptions to this network protection by identifying local hosts and networks that
should be made accessible to authenticated remote users.
In Step 10 of the VPN Wizard, perform the following steps:
Specify hosts, groups, and networks that should be in the list of internal resources
Step 1
made accessible to authenticated remote users.
To add or remove hosts, groups, and networks dynamically from the Selected
Hosts/Networks area, click Add or Delete, respectively.
ASA 5505 Getting Started Guide
7-17
78-18003-02