QUESTION: MACOS VPN Split Tunneling

[Graham Carter]

ISSUE:

Work from home a lot nowadays and vpn into the company using Cisco any connect.
However whilst connected to work vpn, there are restrictions in play, for example personal email is blocked, music streaming sites including spotify is blocked.

WORKAROUND:
I found that starting a virtual copy of windows 7 / 10 in Parallels, there is a function to use a bridged network connection which effectively works to bypass the VPN connection running on the Mac

However this workaround is not ideal as having to run up a virtual OS just to stream music is a pain.
I also googled manual solutions, and they need a lot of scripting and commands which need running every time you fire up the VPN

ASK:
Basically I'm looking for an automated solution software or otherwise to effectively perform vpn split tunnelling on my MacBook
Anyone got any suggestions? If it helps, I run a Synology NAS which may offer another workaround.. 

It is lazy of me, as most of the time, I connect my phone to my bluetooth speaker and stream music that way ?

[Sack]

I'd just stream Spotify from my phone to some headphones or some wireless speakers.

[Graham Carter]

12 minutes ago, Sack said:

I'd just stream Spotify from my phone to some headphones or some wireless speakers.

Most of the time I do... have a sweet bluetooth speaker in the mancave.

 

[NoRomanBatmansAllowed]

https://documentation.meraki.com/MX-Z/Client_VPN/Configuring_Split-tunnel_Client_VPN

 

This?

[Graham Carter]

2 minutes ago, bob51zhang said:

https://documentation.meraki.com/MX-Z/Client_VPN/Configuring_Split-tunnel_Client_VPN

 

This?

Yeah, my googling revealed the same article... too much faff to be a usable solution though... looking for an app which essentially lets you choose which apps route through vpn and which don't... that would be ideal ?

[Lurick]

5 minutes ago, Graham Carter said:

Yeah, my googling revealed the same article... too much faff to be a usable solution though... looking for an app which essentially lets you choose which apps route through vpn and which don't... that would be ideal ?

There is an option on AnyConnect to enable Split Tunneling and LAN connectivity which are turned off by default I believe, but if the headend is sending down a VPN route of 0.0.0.0/0 then all traffic will funnel through it unfortunately

I know on the ASA headend side you can configure the option to allow or disable split-tunneling so depending on how they have it setup you might be SOL without doing a double VPN of sorts.

[Graham Carter]

3 minutes ago, Lurick said:

There is an option on AnyConnect to enable Split Tunneling and LAN connectivity which are turned off by default I believe, but if the headend is sending down a VPN route of 0.0.0.0/0 then all traffic will funnel through it unfortunately

Your referring to the client or server side which isa turned off by default?

[Lurick]

Just now, Graham Carter said:

Your referring to the client or server side which isa turned off by default?

The options are turned off on the client by default. I know where it is on the PC but there should be a cog wheel for settings on the Mac version as well where you can check the boxes