Split tunnel vs full tunnel for remote work

Overview

Full tunnel routes all user traffic via corporate—simple security, higher bandwidth cost. Split tunnel reduces load but exposes local internet path.

Decision matrix

Regulated data on SaaS only reachable via SWG? Favor full or selective tunnel via PAC.

Implementation

Document routes excludes for Teams/Zoom sometimes to reduce choke—verify org DLP stance.

Security ops

Full tunnel aids IP allow lists; split needs robust endpoint EDR.

Comms

Explain to users why video “lags” when full tunnel saturates uplink at home ISP.