topic Windows Endpoint VPN client - can specific clients be allowed to route traffic freely? in Endpoint

Windows Endpoint VPN client - can specific clients be allowed to route traffic freely?

Huzzaa — Tue, 02 Jun 2026 11:03:39 GMT

Hello,

I've been looking at ways to configure some of our corporate clients to be able to route traffic freely without them being forced to route all traffic through our IPSec gateway that they are doing the tunnel with. Split-tunneling?

I'm aware of the option to globally set "Route all traffic to gateway" as off but I need this specifically off for an explicit subset of our employees. And keep it on for the rest as a default.

Does anyone know if this is possible?

Thanks in advance.

Re: Windows Endpoint VPN client - can specific clients be allowed to route traffic freely?

Martijn — Tue, 02 Jun 2026 13:10:57 GMT

Hi,

I have never configured it myself, but you can do a lot of specific configurations with the clients so called trac (.ttm) files.

Have you checked:

sk114882 - Remote Access clients configuration based on group membership

Use case Example 1 is something for you to look at.

Martijn

Re: Windows Endpoint VPN client - can specific clients be allowed to route traffic freely?

Huzzaa — Tue, 02 Jun 2026 12:56:24 GMT

Seems to be what I need indeed.
I'll take a gander at it.

Thanks