topic Re: Full Tunnel VPN integration with third party cloud-delivered security service in SASE and Remote Access

Full Tunnel VPN integration with third party cloud-delivered security service

Diana136742 — Tue, 25 Nov 2025 00:48:12 GMT

Hi everyone,

I’m reaching out on behalf of the customer’s vendor regarding their VPN setup.

Their VPN configuration is full tunnel, meaning all internal and internet-bound traffic is routed through the corporate network. My question is: Is it possible for internet traffic to be redirected to a third-party cloud-delivered security service, such as Cisco Umbrella, even while operating in full-tunnel mode?

I already asked the customer’s Check Point partner vendor about the mode, and they mentioned that split tunneling cannot be enabled due to certain configuration constraints.

Given this limitation, is there any way to achieve this type of setup?

Thank you in advance for your insights.

Re: Full Tunnel VPN integration with third party cloud-delivered security service

PhoneBoy — Mon, 01 Dec 2025 22:22:37 GMT

The gateway configured to send all Internet traffic through the VPN can't do this, but the site it terminates to should be able to.

Re: Full Tunnel VPN integration with third party cloud-delivered security service

the_rock — Mon, 01 Dec 2025 23:41:58 GMT

On top what Phoneboy said, you can also entertain the idea of policy based routing as well.

Re: Full Tunnel VPN integration with third party cloud-delivered security service

CheckPointerXL — Mon, 22 Dec 2025 21:21:44 GMT

not sure i understood the question but this sk comes to my mind https://support.checkpoint.com/results/sk/sk179920