Important note about SSL VPN compatibility for 20.0 MR1 with EoL SFOS versions and UTM9 OS. Learn more in the release notes.

Thread Info
  • State Suggested Answer
  • Locked Locked
  • Replies 2 replies
  • Answers 1 answer
  • Subscribers 39 subscribers
  • Views 3005 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Split Tunnel for Specific Traffic (Office 365, for example)

ken9000

Hello. With the recent health precautions causing companies to push more employees to use VPN clients, MS has released "best practices" for Office 365 traffic.

 

https://techcommunity.microsoft.com/t5/office-365-blog/how-to-quickly-optimize-office-365-traffic-for-remote-staff-amp/ba-p/1214571

 

Is there a way to configure this with SophosConnect? Obviously there's the option to "tunnel all", and we want to tunnel regular internet-bound traffic, but Office 365 doesn't really need to be tunnelled.



This thread was automatically locked due to age.
  • 0

    Hi ken9000,

    I don't think it's possible to create a configuration file to exclude specific traffic from being tunneled with Sophos Connect.  Your best bet would be to tunnel all and create a static entry in the routing table of Windows for these networks.  Set the metric for Microsoft's IP ranges to be lower than the VPN route and this should work.

  • FormerMember
    0 FormerMember

    Hi ken9000, 

    If you want to send all the traffic through VPN tunnel the option "Tunnel All" would work perfectly, but remember Office 365 traffic will be routed through the tunnel as well. There is no option on any remote access VPN solutions to create split tunnel only for specific destination such as traffic to Office 365. 

    I think if you create static route on windows machines to use ISP as gateway for Office 365 traffic it might work. 

    Thanks,

Unfiltered HTML