Pre-7.0, it is not possible to set only one port to go outside the tunnel. In 7.0+ there is an option for exclude routes in the split tunneling network. I would expect that if you enabled split tunneling on the role and created two split-tunneling policies, as defined below, this should work. 1) exclude policy for tcp://*:5389, udp://*:5389 2) allow policy for <yourLANNetworkHere> ... View more