GP Split Tunnel with Microsoft O365/Microsoft Teams & GP License

[jhwarren]

Hello All,

It appears that the large list of IPs and domains to completely enable split-tunneling with GP for O365 & Microsoft Teams requires the GP license to facilitate defining domain names in addition to IP networks (which I understand works without a license).  Are you able to split tunnel O365 and/or Microsoft teams without a license?

I started with just trying to specify the teams executable on the client but that appears to require the license as well.  Before I try to go much further, is there a complete document that spells out what exactly is required to split-tunnel Microsoft solutions  (say we just want to do O365, or Teams, or outlook) in terms of both licensing and defining the split-tunnel configuration?  The list of IPs and domains seems a bit cumbersome to have to manually add so hoping this is not as bad as it appears.

I'm looking for some helpful guidance from those who have traveled down this path already to see what works and does not.

Thank you!

John

[BPry]

@jhwarren,

Look at this article: https://docs.microsoft.com/en-us/office365/enterprise/office-365-vpn-implement-split-tunnel

With the following IP/URL list: https://docs.microsoft.com/en-us/office365/enterprise/urls-and-ip-address-ranges

You'll want to utilize something like MineMeld and a script to actually handle fetching all of the ranges that Microsoft publishes and parsing the ranges that you actually need for the services you are looking to exclude. This is something that Microsoft actually does a really good job keeping up-to-date on.

You absolutely don't need to have a license to get this to function, but that's the easiest way to get this to work without a little bit of work on your end. If this is simply to support COVD-19, you can actually activate a 90-day free trial of the GP subscription through the support portal that may be enough to get you through your use case.