Technical Tip: How to configure split tunnel for SSL VPN using an address override

1. Configure the SSL VPN user group.

2. Configure SSL VPN Settings

3. Configure the allowed subnet for the SSL VPN users.

4. Configure the SSL VPN Portal using a Routing Address Override. The subnet allowed on this address override will only be accessible for SSL VPN users.

5. Configure a Firewall policy:

6. Configure the interface subnet as follows:
   
   

7. The user will able to connect to the SSL VPN:

8. The connected user will only be able to access the allowed subnet 192.168.1.0/24.

An example of a route print from the user's machine:

Note: User Internet traffic will not be forwarded to the tunnel. 

Related article:

Technical Tip: Enabling split tunnel feature for SSL VPN.