This message was deleted.
# citrix-netscalers
Slackbot
05/12/2023, 12:53 PMThis message was deleted.
j
Jan Tytgat
05/12/2023, 1:11 PMAs far as I recall, ACL is the way
k
Kari Ruissalo (WyW)
05/15/2023, 7:08 AMuhm, ok... so for the pooled IPs just a deny rule for the whole pool as destination?
Kari Ruissalo (WyW)
05/15/2023, 7:09 AMif I have pools like
10.0.0.0/24
10.0.1.0/24
...
in the range if 10.0.0.0/16, I would just block that whole /16 as destination?
Kari Ruissalo (WyW)
06/22/2023, 11:56 AMFinally found some time to check this; apparently we have this problem (with split tunnel at least) only if we include the IP pool ranges in the intranet applications (if the network is not included in the split tunnel, the client tries to route the packet from it's default gateway rather than to the tunnel.
I think we'll just configure the intranet apps so that the pool range is not included and this should circumvent the issue.