Hi
I'm curious about the routing logic for this traffic. Can you take a look at the attached image? There appear to be three green logs relevant to the issue.

I wonder why the traffic would be sent like that (not inside tunnel) !
the first: accept by network rule and URL rule.

the second: accept by network rule but URL, CPNotEnoughDataForRuleMatch!

the third: same as the second, and then it does as it configured to do through tunnel!
10.80.91 is an internal server in central office 192.168.3.11 is a printer in branch office
Why is that happening?