Recently enabled split tunneling for our Global protect VPN, and have added some domains into the split tunnel.
For some users domain split tunneling doesn't work.
The domains configured to be included in the split tunnel are as follows
*autologon.microsoftazuread-sso.com
*enterpriseregistration.windows.net
*.microsoftonline.com
We are trying to add these domains to include domain list- however, when Global protect is connected, effected users are unable to connect to these services at all.
Without the split tunnel the functionality was immediately restored for affected users
Now we came across this document which says that Microsoft recommends to use IP addresses instead of FQDN for office 365 applications when configuring split tunneling
However this document explain excluding routes scenario.
So my question is will this method work for include routes too?
