Cant access my local VMs when Connecting to Cisco AnyConnect full VPN

[Mangocis]

We are using Cisco Secure Client full tunnel for our users, and it works fine. However, we have some developers who are experiencing issues when trying to connect to their VMs in their local VMware environment.

When Anyconnect is connected, and I try to add routes manually on the PC, the routes never get added.

Do you have any ideas or suggestions regarding this issue?

[alemabrahao]

Have you checked the routes on Anyconnect app?

[PhilipDAth]

If AnyConnect is operating as a full tunnel then there is no need to worry about routes on that side.

Do the VMs have a default route pointing to the MX?  Are they using the correct subnet mask on their LAN adaptor?

Are the VMs running Windows, and have you tried disabling Windows firewall?

[PhilipDAth]

I assume the AnyConnect users can access other internal resources ok, and it is just these VMs that are not working?

[Mangocis]

Thanks, all!

I was able to fix the issue by adding 0.0.0.0/32 to the Client routing and enabling the 'Allow local (LAN) access when using VPN' option in the XML profile.