Anyone Implemented Skype Split Tunneling?

%3CLINGO-SUB%20id%3D%22lingo-sub-24935%22%20slang%3D%22en-US%22%3EAnyone%20Implemented%20Skype%20Split%20Tunneling%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-24935%22%20slang%3D%22en-US%22%3E%3CP%3EIs%20there%20any%20recommendation%20or%20design%20proposal%20better%20work%20with%3F%20Lot%20of%20articles%20available%20but%20wanted%20to%20know%20anyone%20implemented%20in%20a%20Enterprise%20Level%20organization%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-24935%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EClient%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3ESkype%20for%20Business%20Adoption%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-25195%22%20slang%3D%22en-US%22%3ERe%3A%20Anyone%20Implemented%20Skype%20Split%20Tunneling%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-25195%22%20slang%3D%22en-US%22%3E%3CP%3EYou%20are%20correct.%20The%20problem%20with%20split%20tunneling%20is%20that%20it's%20out%20of%20control%20of%20SfB.%20Every%20VPN%20solution%20has%20his%20own%20specific%20way%20of%20implementing%20this.%20We%20try%20to%20provide%20general%20guidance%20for%20our%20customers%20but%20at%20the%20end%20it's%20up%20to%20the%20VPN%20solution%20how%20to%20implement%20it.%3C%2FP%3E%0A%3CP%3EThis%20blog%20e.g.%20explains%20how%20to%20do%20it%20from%20a%20windows%20firewall%20perspective%20(it's%20actually%20pretty%20simple%20but%20it%20works)%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fblogs.technet.microsoft.com%2Fnexthop%2F2011%2F11%2F14%2Fenabling-lync-media-to-bypass-a-vpn-tunnel%2F%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fblogs.technet.microsoft.com%2Fnexthop%2F2011%2F11%2F14%2Fenabling-lync-media-to-bypass-a-vpn-tunnel%2F%3C%2FA%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EWhat%20kind%20of%20VPN%20solution%20do%20you%20use%3F%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EIvan%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-25184%22%20slang%3D%22en-US%22%3ERE%3A%20Anyone%20Implemented%20Skype%20Split%20Tunneling%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-25184%22%20slang%3D%22en-US%22%3E%3CP%3Eve%20you%20checked%20the%20Guide%20from%20SOF%20regarding%20VPN%20Split%20tunneling%3F%20maybe%20it%20helps%20%3CA%20href%3D%22https%3A%2F%2Fwww.skypeoperationsframework.com%2FOffers%2F%3FpageState%3DDeploymentGuidance%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fwww.skypeoperationsframework.com%2FOffers%2F%3FpageState%3DDeploymentGuidance%3C%2FA%3E%20Document%20name%20is%20%22Guidance-VPN%20Split%20Tunnel-V1%22%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-25125%22%20slang%3D%22en-US%22%3ERe%3A%20Anyone%20Implemented%20Skype%20Split%20Tunneling%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-25125%22%20slang%3D%22en-US%22%3E%3CP%3EThanks%20a%20lot.%20The%20steps%20aren't%20so%20Technical%20but%20idea.%20We%20will%20review%20those%20and%20see%20what%20can%20be%20testing.%20General%20suggestion%2C%20Technical%20Implementations%20steps%20can%20be%20improved.%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-25072%22%20slang%3D%22en-US%22%3ERe%3A%20Anyone%20Implemented%20Skype%20Split%20Tunneling%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-25072%22%20slang%3D%22en-US%22%3E%3CP%3EIt's%20a%20part%20of%20SOF%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSPAN%3EAs%20part%20of%20the%20%3C%2FSPAN%3E%3CA%20href%3D%22https%3A%2F%2Fskypeoperationsframework.com%2F%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%20noopener%20noreferrer%22%3E%3CFONT%20color%3D%22%230066cc%22%3ESkype%20Operations%20Framework%3C%2FFONT%3E%3C%2FA%3E%3CSPAN%3E%2C%20Microsoft%20has%20released%20practical%20guidance%20on%20how%20to%20implement%20VPN%20Split%20Tunnel%20for%20Skype%20for%20Business%20Online.%20You%20can%20download%20the%20document%20%3C%2FSPAN%3E%3CA%20href%3D%22https%3A%2F%2Fskypeoperationsframework.com%2FOffers%2F%3FpageState%3DDeploymentGuidance%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%20noopener%20noreferrer%22%3E%3CFONT%20color%3D%22%230066cc%22%3Ehere%3C%2FFONT%3E%3C%2FA%3E%3CSPAN%3E.%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-25045%22%20slang%3D%22en-US%22%3ERe%3A%20Anyone%20Implemented%20Skype%20Split%20Tunneling%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-25045%22%20slang%3D%22en-US%22%3E%3CP%3EWould%20you%20mind%20sharing%20the%20url%20where%20I%20can%20look%20up%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-25039%22%20slang%3D%22en-US%22%3ERe%3A%20Anyone%20Implemented%20Skype%20Split%20Tunneling%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-25039%22%20slang%3D%22en-US%22%3E%3CP%3EYes%2C%20I%20implemented%20a%20conditional%20split%20tunnel%20for%20my%20customer%20in%20PubSec.%26nbsp%3B%26nbsp%3B%20It%20worked%20where%20non-media%20flowed%20over%20the%20VPN%20and%20media%20flowed%20over%20the%20Edge.%26nbsp%3B%20I%20presented%20a%20chalk%20talk%20at%20TR23%20on%20Edge%20Border%20Security%20that%20you%20can%20view%20and%20will%20also%20be%20talking%20about%20it%20again%20in%20more%20detail%20for%20TR24.%3C%2FP%3E%3C%2FLINGO-BODY%3E
Frequent Contributor

Is there any recommendation or design proposal better work with? Lot of articles available but wanted to know anyone implemented in a Enterprise Level organization 

6 Replies

Yes, I implemented a conditional split tunnel for my customer in PubSec.   It worked where non-media flowed over the VPN and media flowed over the Edge.  I presented a chalk talk at TR23 on Edge Border Security that you can view and will also be talking about it again in more detail for TR24.

Would you mind sharing the url where I can look up?

It's a part of SOF

 

As part of the Skype Operations Framework, Microsoft has released practical guidance on how to implement VPN Split Tunnel for Skype for Business Online. You can download the document here.

Thanks a lot. The steps aren't so Technical but idea. We will review those and see what can be testing. General suggestion, Technical Implementations steps can be improved. 

ve you checked the Guide from SOF regarding VPN Split tunneling? maybe it helps https://www.skypeoperationsframework.com/Offers/?pageState=DeploymentGuidance Document name is "Guidance-VPN Split Tunnel-V1"

You are correct. The problem with split tunneling is that it's out of control of SfB. Every VPN solution has his own specific way of implementing this. We try to provide general guidance for our customers but at the end it's up to the VPN solution how to implement it.

This blog e.g. explains how to do it from a windows firewall perspective (it's actually pretty simple but it works)

 

https://blogs.technet.microsoft.com/nexthop/2011/11/14/enabling-lync-media-to-bypass-a-vpn-tunnel/

 

What kind of VPN solution do you use?

 

Ivan