Hello Cisco Community,
We are currently experiencing significant issues with our SecureConnect deployment and would appreciate any insights or recommendations.
**Environment: **
- Cisco SecureConnect with Meraki MX appliances
- Tunnel connections established between Meraki and SecureConnect PoP
- Traffic from both Meraki sites and Secure Client users routed through SecureConnect
**Current SWG Policy Configuration: **
- SSL Inspection is **not enabled**
- No traffic is being blocked by SWG policies (all traffic is currently allowed)
**Issue: **
Despite having a permissive SWG policy with no SSL decryption and no blocking rules, we are encountering numerous problems where web pages fail to load, and various applications do not function properly when traffic is routed through SecureConnect. This affects both site-to-site traffic from Meraki and remote users connecting via Secure Client.
**Current Guidance from Support: **
Cisco support has recommended configuring local breakout or split tunneling to resolve these issues. However, this approach is not practical for our organization as we have a large number of branch offices, making it extremely difficult to configure and maintain these settings on a per-site basis.
**What We're Looking For: **
Is there any way to address these issues centrally through SecureConnect's SWG or Umbrella policies instead of configuring exceptions at each individual site? We would prefer a solution that can be managed from a single point rather than requiring configuration changes across all our Meraki devices.
Has anyone else experienced similar issues? Any suggestions for a more scalable approach would be greatly appreciated.
Thank you in advance for your help.
