Route O365 traffic local and not in VPN tunnel

[Rick_Weaver]

Customer does not want to use split tunnel and route O365 traffic direct and not thru a the VPN connection. Running R77.30, how do we do this? Is this the only option? https://medium.com/@IrekRomaniuk/split-tunneling-based-on-external-dynamic-lists-for-checkpoint-2ec2...

[PhoneBoy]

That's pretty much your only option.
Note that R80.x would have a different procedure involving the API but the basic premise (encryption domain is everything but O365) is the same.

[Lafarik]

I.e. with R80.30 I could build something like this for EPS dial-up?
Break out all MS Office 365 connections locally?

[PhoneBoy · Accepted solution]

Actually, there is a new SK for this in R80.x.
It's still the same fundamental configuration (define an encryption domain with everything EXCEPT the Office 365 address space) but there's a script that you can run to automate this for you.

https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solut...