Security Basics mailing list archives

Re: Split Tunneling


From: rcarlin () gkservices com
Date: 23 May 2006 17:58:37 -0000

Split-tunnel is a VPN term.  In practice, split tunnel allows the end-point to access a protecteed network (VPN) and an 
unprotected network (local or Internet) at the same time.  

It's mostly useful for a remote user to access local resources like a network printer.  Of course, the downside is if 
the end-point is infiltrated (trojan, RAT), it can be a jump off point for an intruder into the protected networks.

In general, you want to avoid split tunnels unless you've got some type of integrity/client validater on the end-point 
and use strong authentication.   


Current thread: