same-security-traffic permit intra-interface

nat (Outside) 1 172.16.1.0 255.255.255.0
group-policy <name> attributes
  split-tunnel-policy tunnelall

Notes:

  • The last 3 lines are to allow traffic over a client-to-site VPN to pass all traffic through the firewall and to the internet. ie. No split tunneling

Next Post Previous Post