Forum Discussion
There isn't really a short answer. Apart from it depends on the IP address the client get back from a DNS query for the APM server address.
I went through this quite a bit last year after some clients started to complain that they could no longer access the web top after they'd started the network access up. And it turns out it's reasonably straight forward in concept. But highly dependent on how you have everything (Including DNS) setup.
If the IP address is routable via the network access tunnel. You'll access the web top using whatever IP you're NAT'ed to (Including SNAT). If the IP address the client gets back from a DNS query is NOT routable via the tunnel then they'll access the webtop directly (In parallel and external) to the tunnel. SO the web top would see their access from the same IP address as before they started the network access.
H