Block client VPN over site-to-site VPN tunnel

[WarrenG]

We have a client with multiple sites that are connected together using the site-to-site VPN. Users in the remote offices are still also using the client VPN (AnyConnect) in order to connect to the main office, which we suspect may be causing network performance issues. Is there any way to create a rule or policy to prevent them from using the client VPN while they are connected to the network at any of the remote offices?

[ww]

You could block the client vpn url/ip+port in the vpn firewall (and maybe L3 fw if needed)

[WarrenG]

Thanks, can you clarify what you mean by the "vpn firewall" - I only see the L3 firewall in the portal. How would I access this vpn firewall that you are referring to? Thanks!

[ww]

https://documentation.meraki.com/SASE_and_SD-WAN/MX/Design_and_Configure/Configuration_Guides/Site-t...

[WarrenG]

Got it, I was looking under client VPN but this makes more sense. Thanks!