topic split tunnel to include or exclude traffic based on the destination domain in Prisma Access Discussions

split tunnel to include or exclude traffic based on the destination domain

DeepakVerma — Thu, 15 Jun 2023 14:43:40 GMT

Hi All ,
Just checking can we use domain option to force one particular FQDN to move traffic via tunnel ?
We don't want for complete domain , just few FQDN.

like domain : example.com
we want that traffic for test.example.com should go via tunnel and rest using default route over internet ?

Re: split tunnel to include or exclude traffic based on the destination domain

reaper — Thu, 29 Jun 2023 13:07:57 GMT

yes, you can achieve this via traffic steering (in the service configuration)

first assign the SC you want to use in a group, then create a traffic steering rule that redirects a custom category containing your FQDNs to that SC group

Re: split tunnel to include or exclude traffic based on the destination domain

DeepakVerma — Thu, 29 Jun 2023 13:37:20 GMT

@reaper
Thanks for your reply.
Do you have any sample configuration which i can refer ?

Re: split tunnel to include or exclude traffic based on the destination domain

reaper — Thu, 29 Jun 2023 13:49:14 GMT

sure:

Re: split tunnel to include or exclude traffic based on the destination domain

DeepakVerma — Thu, 29 Jun 2023 19:58:27 GMT

@reaper Thanks for all your help. 😊