Dynamic split tunnel and proxy

[jefferyprice]

when you do dynamic split tunneling and  you use a proxy for internet access do you  need to create a pac file that allows the dynamically excluded domains to go direct to the internet also?

[Francesco Molino]

Hi

Goal of DST is to redirect traffic from certain domains directly through the client internet connection and avoid tunneling it toward the asa.
Your remote clients have a proxy configured? Is it cloud or private?
So if you're using a private proxy, these domains have to removed otherwise they'll still go through the proxy which means through the vpn.
If that's a cloud service, then don't need to remove them because you can keep the traffic to go through your cloud proxy and not tunnel them back to your asa to then go to your cloud proxy.

Is that clear?