Using Session variables to control Split Tunneling

You can create two separate resource groups on firepass to help facilitate. Another option is to use AD groups to separate it out.

 

 

Let me explain:

 

 

Certain users come in under the 192.168.1.1 IP address, you can either designate that IP address as a protected configuration and then protected resource group.

 

 

You can also select an AD group that is given to those who require split tunneling that point to the separate network access resource.

 

 

Multiple ways of doing thigs on the firepass, I can think of three or four more.