topic Re: Route O365 traffic local and not in VPN tunnel in SASE and Remote Access

Route O365 traffic local and not in VPN tunnel

Rick_Weaver — Wed, 15 Apr 2020 23:02:12 GMT

Customer does not want to use split tunnel and route O365 traffic direct and not thru a the VPN connection. Running R77.30, how do we do this? Is this the only option? https://medium.com/@IrekRomaniuk/split-tunneling-based-on-external-dynamic-lists-for-checkpoint-2ec20aab6525

Re: Route O365 traffic local and not in VPN tunnel

PhoneBoy — Fri, 17 Apr 2020 15:33:15 GMT

That's pretty much your only option.
Note that R80.x would have a different procedure involving the API but the basic premise (encryption domain is everything but O365) is the same.

Re: Route O365 traffic local and not in VPN tunnel

Lafarik — Thu, 30 Apr 2020 06:55:02 GMT

I.e. with R80.30 I could build something like this for EPS dial-up?
Break out all MS Office 365 connections locally?

Re: Route O365 traffic local and not in VPN tunnel

PhoneBoy — Fri, 29 May 2020 01:04:21 GMT

Actually, there is a new SK for this in R80.x.
It's still the same fundamental configuration (define an encryption domain with everything EXCEPT the Office 365 address space) but there's a script that you can run to automate this for you.

https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk167000