I have a user that is able to connect to a CISCO concentrator successfully using Zs but the VPN profile is configured to allow split tunneling.
The organizatin I work for will not allow split tunning (or Local Lan access) when their connect with VPN.
