Anyconnect client dynamic split tunnell based on user

[SA1]

Hi,

With MX Anyconnect is possibile to send specific traffic (some subnet) through VPN based on user, for example based on group policy or based on same radius attribute?

Thanks

[DarrenOC]

Hi @SA1 

Looks possible using Group policies via Radius:

https://documentation.meraki.com/MX/Client_VPN/AnyConnect_on_the_MX_Appliance#Overview

[SA1]

Group Policy only assign firewall rules to single user without edit route setting. Can i also change routing based on user group policy? My idea is: permitted destination --> encapsulate in vpn, not permitted traffic --> not encapsulated.

[PhilipDAth]

No.

However, you can give everyone a split tunnel list that includes everything, and then use group policy to control which things on that list they can access.

[SA1]

And manually can I set different split tunnel to different user? Meraki will add this function?