An enterprise is configuring a remote access VPN solution for mobile employees using Cisco AnyConnect client software. The network engineering team wants to implement split-tunneling to conserve corporate Internet bandwidth while maintaining secure connectivity to internal resources. Which two statements describe the operational behavior of split-tunneling in this remote access VPN deployment? (Select TWO.)
- Traffic destined for specified internal corporate IP subnets is encrypted and routed through the secure VPN tunnel.Answer
- Unencrypted Internet-bound traffic is routed directly out of the user's local network interface without traversing the corporate network.Answer
- CAll user traffic, including public Internet browsing, is forcibly encrypted and forwarded through the central security gateway.
- DSplit-tunneling establishes two concurrent site-to-site IPsec tunnels from the user endpoint to separate gateway routers.
- EThe local endpoint default gateway is completely removed, preventing access to any local network devices such as local printers.
Answer
Split-tunneling encrypts and routes traffic destined for specified corporate subnets through the VPN tunnel, while allowing non-corporate Internet traffic to route directly via the endpoint's local interface.
In a remote access VPN deployment with split-tunneling configured, the VPN client receives a list of internal networks from the gateway. Traffic matching these corporate destination IP addresses is encrypted and encapsulated into the VPN tunnel. Traffic going to all other destinations (such as public websites) bypasses the tunnel and is sent directly out of the local network interface, saving corporate Internet bandwidth.
Step-by-Step Solution
Key Concept
Remote Access VPN Split-Tunneling vs Full-Tunneling