I know! I was all excited to push everyone over to WARP - but it's a no go - people don't want all their traffic being proxied through corp side (we reserve rig

I know! I was all excited to push everyone over to WARP - but it's a no go - people don't want all their traffic being proxied through corp side (we reserve right to do what we need / want with corp traffice). Info here: https://developers.cloudflare.com/cloudflare-one/connections/connect-devices/warp/exclude-traffic/split-tunnels https://developers.cloudflare.com/cloudflare-one/connections... And yes, the junky folks have this solved - you drop the endpoint on client, set a split tunnel and just pick up your enterprise route. A basic split tunnel (normal style) or one that picked up accessible ranges based on the individual user permissions both would work fine. So if you had a single app on 10.15.54.120 and user had access to that app, split tunnel would put that into route. Key is to leave everything else out - so your computer can see your phone can see your lights etc etc on local network and netflix and friends work normally.