Forum Discussion
NimbostratusUsing Split Tunnel in and out of the office
I'm trying to configure a work laptop so that it works on the domain normally in the office but when out of the office the Edge client automatically connects and can access the intranet and outlook like in the office.
When using the force all traffic it works. But we want to us split tunnel so that traffic only goes to certain servers. When we login to the laptop on the domain it fails to connect to the servers. When I ping them I get general failure. When I change to use the VPN connection it takes a bit of time but once connected I can then ping the servers I've allowed in the split tunnel.
What have I not done?
Thanks
Chris
4 Replies
kunjanAre you using "Enable always connected mode" ?
Enable always connected mode When this option is selected, the BIG-IP Edge Client tries to connect to VPN right after the user logs on to Windows and prohibits the user from disconnecting VPN. The user is prevented from accessing the Internet and the local network until a VPN connection is established.
Chris_Richards_Ah. I do have always connected mode
The downside for me would be that users would need to initiate the VPN connection when out of the office which i'm trying to avoid.
I'll see what happens when it's not enabled.
- kunjan
You may want to try Network location awareness. 'Always Connected mode' is a security feature which enforces VPN, but it lacks NLA currently.
- Chris_Richards_
Thanks for that I've made some progress. When load the laptop up on the network it works and then it works when switching to the vpn. I've got an issue if I switch back to the LAN network where it does not connect correctly. It only pings back what is in the split tunnel. I'm testing this issue a bit more.
The other issue is the speed at which the Edge client connects. It feels a bit slow. Starting by attempting to download, then connecting and then performing domain logon. Is there a way of speeding up the connection process?
