How to bypass umbrella for single URL,

[PacketSpartan]

Hi All 

I am trying to figure out how to bypass umbrella for a single URL, (needs to go via DC).  Our customer has migrated over to umbrella and we need to source the end user's traffic from our External FW. 

Currently, we have Anyconnect with the umbrella module, 

My question is

1. are we restricted to using the PAC file for bypassing the url?
2. Does the PAC file need to be pushed out via GPO? so the proxy option is filled in edge/safari. 

[PacketSpartan · Accepted solution]

Here is what we did 

- We forced the traffic to go through the VPN tunnel instead of umbrella, (Split tunnel settings on Anyconnect)