- Access exclusive content
- Connect with peers
- Share your expertise
- Find support resources
Split tunneling is a very powerful feature which is often used by remote workers with active VPN connections. This extremely useful feature can be harnessed to greatly improve user experience—but if configured improperly, can also become a grave security risk.
Split Tunneling is a computer networking concept that allows users to access different security domains at the same time. The most well-known example is the remote user connecting to his office resources through the company VPN—but at the same time accessing the internet through his home ISP connection.
Split tunneling is generally categorized into split-include versus split-exclude tunnel. Split-include is the concept where your default traffic uses your default route (duh), and you explicitly configure which traffic you want to send (include) into the tunnel. Split-exclude, as you might have guessed ,will send all the traffic into the tunnel by default and you will have to explicitly configure the traffic you want to be sent elsewhere (to your local LAN for example).
As I noted, the most common example of split-tunnel is a remote user traveling and working from his hotel or an employee working from home. Administrators can configure the split-tunneling in such a way that these users can still browse to their favorite cat -related websites and watch their personal cat-movie attachments over their personal internet connection, all while accessing corporate resources through the corporate VPN. More often than not, users find the split-tunneling convenient, as there are likely less restrictions using their personal ISP connection than using the corporate VPN connection, which won't allow access to their favorite funny cat websites. (Sorry for all the cat references for those who are not feline fans.)
For more information on Split-Tunneling, please visit the following links:
Do you have more to say about split-tunneling? Please share your thoughts and ask questions in the comments section below.
Thank you for taking time to read this blog!
Don't forget to hit the Like (thumbs up) button and to Subscribe to the LIVEcommunity Blog area.
Kiwi out!
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
Subject | Likes |
---|---|
2 Likes | |
1 Like | |
1 Like | |
1 Like | |
1 Like |