This functionality occurs after the tunnel has been established and the non-secure and secure routes are adjusted accordingly based on the Administrators configuration.Ī good example would be to exclude traffic to SaaS services dynamically based on DNS resolution, so traffic destined to SaaS goes directly to the service, instead of through the tunnel.
Dynamic Split Tunnelingĭynamic Split Tunneling (DST) provides the ability to define domains that will be either included or excluded dynamically after the user resolves the domain using DNS. Split tunneling has been in existence for a long time and in its traditional form is based on static statements using a standard access-list to either include or exclude IP networks from the VPN Tunnel. In many cases, customers are adding or repurposing existing hardware to increase the capacity in their VPN head-ends.You are limited to the maximum VPN sessions supported by the head-end and not An圜onnect.Items of Note for the free An圜onnect Licenses: Link to Cisco's Free Offers for COVID-19 Pandemic. Note: This article covers all forms of Split tunneling, including Dynamic Split Tunneling (DST) for your education and guidance.ĭue to the COVID-19 global pandemic, Cisco c ustomers are increasing An圜onnect licenses to allow a surge of An圜onnect sessions to their current headend ASA/Firepower. Please see the blog written by Aaron Woland regarding DST Best Practices.ĭynamic Split Tunneling – a COVID-19 Best Practice In response to the COVID-19 global pandemic, where customers are moving to 100% remote-access, and combining that with 100% virtual meetings (i.e.:WebEx), Cisco is breaking with tradition and providing some best-practice guidance for RA-VPN design.Ĭisco's guidance, especially in this time of global response, is to use Dynamic Split Tunneling to exclude the DNS names related to real-time communication software as a service (SaaS) tools, such as WebEx. An圜onnect and ASA Remote Access VPN (RA-VPN) is very powerful with a lot of configuration options to help your organization deploy in whatever way that best fits your needs. This article was created due to the COVID-19 pandemicĬisco does not normally provide specific guidance around how you should design your VPN. Dynamic Split Tunneling Exclude Configuration.An圜onnect settings to help alleviate that increased load.
0 kommentar(er)
