SSL VPN - Split Tunnel but with some client side static routes

[ggntt]

Hi there We have a situation where a customer is using SSL VPN to access central servers. We want to turn on split tunneling but we cant.. As VPN users need to access a number of online (external sites) services via the central site over the VPN. (online service provider has access restricted to their central site only) Is it possible to " push" static routes out to the client VPN so we can force traffic to those online services via the VPN and allow normal internet access locally ? Thanks ggntt

[Carl_Wallmark]

Hi, Yes, you can push whatever routes you want, its done within in the firewall policy: In the policy where you specify: (for example) WAN1 -> ssl.root : source address: any destination address: <your static routes> You just add the address objects to the destination address, those addresses will be pushed out to the client.