What is split tunnelling on a VPN, and is it a risk?

Split tunnelling means that only traffic for company systems goes through the VPN, while everything else, such as web browsing and video calls, goes straight to the internet from wherever the laptop is. It saves bandwidth and makes calls smoother, which is why it is common. The risk is smaller than it sounds if the laptop itself is protected: the device becomes the boundary, so it needs endpoint protection, updates and any web filtering you use. The trade-off is visibility: internet traffic that never enters the VPN never crosses your office network, so office firewalls and network sensors do not see it. Decide deliberately: full tunnelling if you need to inspect all traffic centrally, split tunnelling with strong endpoint controls otherwise. NetSenX sees the part that crosses a monitored segment; for the rest, an agent on a Linux or macOS laptop watches that laptop's own connections wherever it is.

← All 40 questions on Remote work and exposed servicesAll topics