Internet Access from VPN

My users need to be able to surf while using VPN (I know it is not best practice but I REALLY need it)...

You can solve this with split tunnels on Pix Version 6.1, 6.2 and 6.3 according this article.

In version 7 there will be an easier solution that looks like this:

      same-security-traffic permit intra-interface