New answers tagged cisco-vpn
It doesn't allow split tunnels. This is a security feature of the VPN software. Allowing split tunnels puts the business network at risk because this can be used to bypass the firewall. The software actively monitors host routing changes, and it will reverse changes made to the host routing.
I ended up answering my own question - this is possible. I found out that Duo offers a free trial, so I went ahead and set up an account to try to get it to work with my setup. In the end, I was able to have both Active Directory LDAP and Duo Security LDAP set up at the same time. The relevant part of the code is here: tunnel-group VPN_RA type remote-access ...
Yes the cisco asa 5500 series can support l2tp/ipsec firewalls and the native windows client can be used to connect to them.
Top 50 recent answers are included