Do you allow your vpn clients to do split tunneling?

["John L. Isenhour" <jisenhou () KENNESAW EDU>]

Hi All,

We set up a citrix vpn service and I became aware that we're allowing split tunneling.  This is verboten most places 
I've been, but some of the network staff have voiced that it might be a preferred way to go.

We don't do traffic surveillance (aside from blocking p2p and external scans) so I would like to gain an understanding 
of whats the worst case, both allowing split tunneling and not.

Seems to me we're safer as an institution with it off.  VPN is for faculty and staff, btw.

tnx,
-john

--
John Isenhour, Ph.D.
Chief Technology Officer
Information Systems Architect
Kennesaw State University
Kennesaw GA 30144
770-423-6620