Please note that the below enhancement was introduced starting 7.5.10 SASE client, which will allow a split-dns configuration on the client - so you can set up dns resolvers for specific domains to be forwarded towards the SASE GW while the rest can be forwarded
towards the DIA/breakout
While setting up "Split-tunnel", one would need to be careful to set up specific domains, or a dummy domain, on the SASE portal client configuration (as it's currently a mandatory field in Concerto configuration) - if you don't configure specific domains (or
dummy domain) all the dns requests would end up on the SASE GW instead of being sent via DIA on the client, as these dns resolvers are set up in Windows NRPT rules and also on MAC OS.
<Concerto client configuration - note that this field is mandatory and cannot be bypassed>
<Configuration context on the Director>
