Split-Tunnelling for M365

Sanjay_Ramaiah — Wed, 26 Apr 2023 12:32:03 GMT

Hi All,

We need to implement Split-Tunneling for M365 only for the Mobile Users in Prisma. Please suggest us the best way to Implement? Can we implement using EDL? Or we have to add all the FQDNs one by and then acheive it?

Regards,

Sanjay S

Re: Split-Tunnelling for M365

nikoolayy1 — Tue, 09 May 2023 07:04:27 GMT

EDL can not be used for Split tunnel as you can just click the options for split tunnel and see that there are no EDL options.

The prisma access cloud has peering with AWS and Azure so I do not understand why you would want split tunnel as for speed you can just dissable the SSL decryption for office 365 ip addresses and urls and this is where you can use EDL in the security and decryption policies to not decrypt office 365 and Palo Alto hosts such dinamic lists for the office 365. I suggest to read the links below:

https://docs.paloaltonetworks.com/resources/edl-hosting-service

https://www.paloaltonetworks.com/resources/techbriefs/prisma-access-microsoft-365

https://docs.paloaltonetworks.com/prisma/prisma-access/prisma-access-cloud-managed-admin/secure-mobile-users-with-prisma-access/office-365-integration-with-explicit-proxy

topic Split-Tunnelling for M365 in Prisma Access Discussions

Split-Tunnelling for M365

Re: Split-Tunnelling for M365