Skip to content

Commit da35baf

Browse files
committed
Improve Split Tunnel config
1 parent b50c70b commit da35baf

File tree

1 file changed

+10
-3
lines changed
  • src/content/docs/cloudflare-one/policies/gateway/egress-policies

1 file changed

+10
-3
lines changed

Diff for: src/content/docs/cloudflare-one/policies/gateway/egress-policies/index.mdx

+10-3
Original file line numberDiff line numberDiff line change
@@ -174,9 +174,16 @@ Gateway uses Rust to evaluate regular expressions. The Rust implementation is sl
174174

175175
The [Application](#application), [Content Categories](#content-categories), [Domain](#domain), and [Host](#host) selectors are only available for traffic onboarded to Gateway with [WARP](/cloudflare-one/connections/connect-devices/warp/), [PAC files](/cloudflare-one/connections/connect-devices/agentless/pac-files/), or [Browser Isolation](/cloudflare-one/policies/browser-isolation/). To use these selectors to filter traffic onboarded with WARP, you need to:
176176

177-
1. [Add a Split Tunnel route](/cloudflare-one/connections/connect-devices/warp/configure-warp/route-traffic/split-tunnels/#add-a-route) to exclude the IP address `100.60.0.0/12`.
178-
2. Ensure you do not have a Split Tunnel route to exclude `100.60.0.0/10`.
179-
3. Add and deploy the following key-value pair to your devices' [WARP configuration file](/cloudflare-one/connections/connect-devices/warp/deployment/mdm-deployment/) (`mdm.xml` on Windows and Linux or `com.cloudflare.warp.plist` on macOS):
177+
1. In your WARP Connector device profile, ensure Split Tunnel is set to [**Exclude IPs and domains**](/cloudflare-one/connections/connect-devices/warp/configure-warp/route-traffic/split-tunnels/#change-split-tunnels-mode).
178+
2. [Remove the route](/cloudflare-one/connections/connect-devices/warp/configure-warp/route-traffic/split-tunnels/#remove-a-route) to the IP address `100.64.0.0/10` from your Split Tunnel list.
179+
3. [Add routes](/cloudflare-one/connections/connect-devices/warp/configure-warp/route-traffic/split-tunnels/#add-a-route) to exclude the following IP addresses:
180+
- `100.64.0.0/12`
181+
- `100.81.0.0/16`
182+
- `100.82.0.0/15`
183+
- `100.84.0.0/14`
184+
- `100.88.0.0/13`
185+
- `100.96.0.0/11`
186+
4. Add and deploy the following key-value pair to your devices' [WARP configuration file](/cloudflare-one/connections/connect-devices/warp/deployment/mdm-deployment/) (`mdm.xml` on Windows and Linux or `com.cloudflare.warp.plist` on macOS):
180187
```xml
181188
<key>doh_in_tunnel</key>
182189
<true/>

0 commit comments

Comments
 (0)