An圜onnect clients cannot communicate between each other.An圜onnect clients cannot establish phone calls.An圜onnect clients can establish phone calls.

However, there is no audio on the calls.Īn圜onnect clients cannot access internal resources.

Navigate to the Connection Profile that An圜onnect clients are connected to: Devices > VPN > Remote Access > Connection Profile > Select the Profile.

Navigate to the Group-Policy assigned to that Profile: Edit Group Policy > General.

Check the Split Tunneling configuration, as shown in the image.

If it's configured as Tunnel networks specified below, verify the Access Control List (ACL) configuration.

Navigate to Objects > Object Management > Access List > Edit the Access List for Split tunneling.

Ensure that the networks that you try to reach from the An圜onnect VPN client are listed in that Access List, as shown in the image.

Verify Network Address Translation (NAT) exemption configuration. Remember that we must configure a NAT exemption rule to avoid traffic to be translated to the interface IP address, usually configured for internet access (with Port Address Translation (PAT)).

Navigate to the NAT configuration: Devices > NAT.

Ensure that the NAT exemption rule is configured for the correct source (internal) and destination (An圜onnect VPN Pool) networks.

Also check that the correct source and destination interfaces have been selected, as shown in the image. Per your Access Control Policy configuration, ensure that traffic from the An圜onnect clients is allowed to reach the selected internal networks, as shown in the image.Īn圜onnect clients do not have internet access Note: When NAT exemption rules are configured, check the no-proxy-arp and perform route-lookup options as a best practice.

There are two possible scenarios for this issue.

Traffic destined for the internet must not go through the VPN tunnel.Įnsure that the Group-Policy is configured for Split tunneling as Tunnel networks specified below and NOT as Allow all traffic over tunnel, as shown in the image.Ģ.

Traffic destined for the Internet must go through the VPN tunnel. In this case, the most common Group-Policy configuration for Split tunneling would be to select Allow all traffic over tunnel, as shown in the image.

Verify NAT exemption configuration for internal network reachability.

Cisco anyconnect vpn clients