SSL VPN Split Tunneling and Office 365

UPDATE: Apr 9, 2020 A colleague, Vinicius M. , put together a Configuration guide: Optimizing Office 365 traffic on Remote Access through VPNs when using BIG-IP APM.pdf As we shift to a much larg...
Updated Jun 16, 2022
Version 2.0
BIG-IP Access Policy Manager (APM)
o365
security
split tunneling
ssl vpn
ReganAnderson's avatar
Icon for Employee rankEmployee
I've worked as a Professional Services Consultant for F5 Networks since 2011. I'm primarily focused on designing and implementing SSL Orchestrator and APM solutions.
View Profile
ReganAnderson's avatar
Icon for Employee rankEmployee
I've worked as a Professional Services Consultant for F5 Networks since 2011. I'm primarily focused on designing and implementing SSL Orchestrator and APM solutions.
View Profile
GeoffG's avatar
GeoffG
Icon for Altostratus rankAltostratus
Jun 20, 2020

The access policy and NA​ is being updated ok but I still need to "Apply" the access policy so it won't take effect until this is done is all.. Just needs my manual intervention.

​

Also​, adding the URLs to the script includes them in the DNS exclusion. Which is fine as this is the intended functionality of the script but in my case this would likely mean the routing table on the client could potentially be very long as a result.. I believe each entry from the DNS Exclusion list is resolved and then added in as a host route.

​

I'm not actually sure Microsoft has an endpoint specifically of windows update like it seems they do for O365.

​

Thanks very much for your replies too. This script in any event is great and much appreciated.

​

Cheers​