Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
Yes, you can make that spoke operate in split tunnel instead of full tunnel. The usual approach is to advertise only the internal subnets that need to reach the hub and avoid making the hub the default route. That way, internet-bound traffic exits th...