Chapter 21 - Implementing SSL VPNs

Question 1

What is Split Tunneling?

Answer 1

Split tunneling allow an administrator to configure which destination subnets need to use the VPN tunnel to be reached. All other “normal” traffic does not traverse the VPN tunnel but rather uses the Internet connection directly to reach its destination.

example: HTTP request to google.com goes straight to google servers.

however,

SSH traffic destined to 172.25.1.5 will traverse the VPN tunnel to the corporate network

Question 2

What are the dangers of using Split Tunneling?

Answer 2

The problem with having split tunneling enabled is that if the client machine is compromised by a hacker or virus over the Internet, they could in turn exploit the VPN tunnel to gain access into the corporate network.