Split-tunneling with O365

[Mistouf]

Hello,

I will implement the split-tunneling for Teams, Sharepoint and Exchange.

So I use the Microsoft’s documentation (https://learn.microsoft.com/en-us/microsoft-365/enterprise/microsoft-365-vpn-implement-split-tunnel?...) and the Pulse Secure’s article (https://kb.pulsesecure.net/articles/Pulse_Secure_Article/KB44417).

When a client is connect on the VPN, I see with a tracert the way is direct or not.

But now, for exemple, when a client is connect on the VPN, the website “https://<tenant>.sharepoint.com ” or ” https://<tenant>-my.sharepoint.com” they are more latency. The symptom is same with Teams.

Is there another configuration missing?

Thank you for your help.

[zanyterp]

are you seeing that go through the tunnel or direct on the lan?

[Mistouf]

Yes, when I activate split tunneling, and I try to go to site "https://<tenant>.sharepoint.com", I can see the traffic going directly to the internet, but the users tell me that the site is very slow or even inaccessible.
If I do a tracert to a site other than Microsoft, the traffic is well through the LAN

[zanyterp]

thank you
it could be due to dns resolution
do you have a way to test putting that traffic through the tunnel for a handful of users?

[Mistouf]

I did a tracert to the URL and an nslookup on the address of the O365 tenant.
I have the same result with one person where it works and with one person where it doesn't.

[zanyterp]

for the O365 sites is it showing going out the local adapter?
if you have not done so already, please open a case with our support team