Hey Joe! (or any other ASA people)

Have a user that vpn's to us all day long. Wondering the best way (&
how to do it) so this user can surf the web too.

Whether it's split tunneling thru his int access, or going out our
current firewall, whichever way is best & is fairly easy to setup.