www.checkpoint.com © 2024 Check Point Software Technologies Ltd. All rights reserved.

Sometimes VPN connections can cause a noticeable lag for latency-sensitive applications such as video

conferencing services like MS Teams or Zoom. That’s why split tunneling–allowing select traffic to bypass

the VPN–is a must-have feature for enterprise-grade networking and network security platforms.

A common way to handle split tunneling is by excluding IP address ranges from the VPN tunnel. But split

tunneling for a single service could mean listing dozens or even hundreds of IP ranges, and even this may

not be enough as a service’s IP addresses may dynamically change without notice.

That’s why fully qualified domain names (FQDNs) such as teams.microsoft.com are the most efficient

method for split tunneling. With FQDNs, a handful of domains can cover an entire service without

worrying about IP address changes on the application side. This can be enhanced with wildcards to

exclude a range of FQDNs with just one rule, such as *.zoom.us or *.teams.microsoft.com.

Consult the support forums of your business application to get a list of the necessary FQDNs for

configuring split tunneling rules.

Exclude Inefficiency with Harmony SASE Harmony SASE’s FQDN Split Tunneling rules are an easy way to ensure that your employees don’t have to

slow down. Teams using latency-sensitive applications won’t suffer lag due to the VPN connection, while

IT can quickly set up split tunneling rules.

Additionally, Harmony SASE’s unique web security solution, Internet Access can protect employees even

when not connected to their corporate VPN.

See our support documentation for a detailed step-by-step guide for creating split tunneling rules.

Advanced VPN Bypass Rules: Optimize Your Network Performance

https://www.checkpoint.com/harmony/sase/internet-access/ https://support.perimeter81.com/docs/split-tunneling