What does the FortiSASE endpoint profile configuration involve for split tunneling?

In the context of FortiSASE configuration, split tunneling refers to the method of directing some traffic through the internet without passing it through the FortiSASE security service, while ensuring that other traffic is routed through the service for security purposes. When configuring the endpoint profile for split tunneling, specifying Fully Qualified Domain Names (FQDNs) is essential. This involves identifying which applications or destinations should use the split tunneling feature.

By adding specific FQDNs to the split tunneling destinations list, network administrators can effectively manage and control the flow of data. This is crucial for optimizing performance and ensuring that only necessary traffic is protected and filtered for security. The use of specific FQDNs allows for precise control over user traffic, ensuring that high-bandwidth applications or trusted services can operate without unnecessary latency or rerouting through the FortiSASE infrastructure, while still protecting sensitive data through the established security measures.

The other options, while related to FortiSASE administration, do not directly pertain to the specific action of configuring split tunneling within an endpoint profile. For instance, accessing the profile and installing user certificates is focused more on authentication than on traffic management. Regular updates of antivirus signatures relate to maintaining security posture rather