Forum Discussion

PC_46752's avatar
PC_46752
Icon for Nimbostratus rankNimbostratus
Sep 14, 2009

Split tunnel Vs full access

Hi there!

 

This is a new implementation where our environment requires restricted (targeted IPs to vendors) for which we have enabled IP filtering. The issue is that except for these set of permitted IPs, the internet traffic is blocked for the vendors.

 

I'd appreciate some recommendations to resolve this one.

 

Could Split tunneling an option ? and how safe it is ?... do we have other options as well?, pls let me know.

 

Thx, Jp
BIG-IP Access Policy Manager (APM)
remote access
security
  • The_Bhattman's avatar
    The_Bhattman
    Icon for Nimbostratus rankNimbostratus
    Sep 14, 2009
    Split tunnel would basically allow the users to access their local network and internet along permitted access. It's not considered being safe to use in general because the connected client, if it is not protected with up date antivirus, patches, and software files, something from their side of the internet could piggy back on the permitted connection. However, if you can enforce the upto-date antivirus, patches and software files then at least mitigate the risk.

     

     

    CB