CDO Anyconnect VPN split tunneling for Azure website

[amitspanchal]

I want to allow only the server traffic and the Azure traffic to be passed through VPN and all other traffic through local internet. I had configured the url portal.azure.com in the custom attribute of the secure client configuration. But that didn't work for me. So the Azure team said me to allow all the URLs given in this document.

But in this document the wildcard urls are also given which needs to be configured. But the wildcard urls are not accepted when trying to configure.

[ccieexpert]

wilcard is not supported... the only option is to get the FQDNs or subnets..

Microsoft does maintain a list of ip subnet for O365/M365 .. i think the Azure portal is different, but you can ask them for ip subnets, and put them in your split tunnel list.

this is the for M365:

https://learn.microsoft.com/en-us/microsoft-365/enterprise/microsoft-365-vpn-implement-split-tunnel?view=o365-worldwide