Proper Way to allow Split-tunneling

[SDorsey]

Greetings all!

I am trying to allow split-tunneling for a client so they can access their home network while connected via VPN. I see in split-tunneling box, the option to add specific network ranges but hope there is a better way since I could not hope to know all of their home network ranges. I am sure I am missing something.

Thanks in advance!

[kprakash · Accepted solution]

Configure just the networks that are behind the PANFW, under the split tunneling, that the users want to access when coming via the VPN. So any traffic destined to these networks only would go via the tunnel, and any traffic to the home network would use the other adapters ( adapter other than the GP adapter )

[kprakash]

Also ensure that the addresses configured under the split tunneling and the IP address that they are assigned internally at their home ( through their wifi modem ) do not overlap. This will result in an ARP conflict on the adapters, and will result in unwanted routing issues.