Skip to content

Split Tunneling

What is Split Tunneling?

A VPN configuration where only certain traffic is routed through the VPN tunnel while other traffic accesses the internet directly.

Information Security

Frameworks that govern split tunneling

NIST SP 800-53 Rev 5View framework →CIS Controls v8View framework →

What the standards actually require on split tunneling

Requirements naming split tunneling across 5 standards, quoted from the control text.

CMMC 2.01 control

Prevent a remote device from holding a connection to organizational systems while simultaneously connecting through another path to external network resources, the split tunneling case.

SC.L2-3.13.7 · Split Tunneling →
FBI CJIS Security Policy1 control

Prevent split tunnelling for remote devices connecting to organisational systems.

fbi-cjis-security-policy::SC-7(7) · SC-7(7) Boundary Protection | Split Tunneling for Remote Devices →
NIST SP 800-53 Rev 51 control

Prevent split tunneling for remote devices connecting to organizational systems unless the split tunnel is securely provisioned using [Assignment: organization-defined safeguards].

NIST800-SC-7(7) · SC-7(7) Boundary Protection | Split Tunneling for Remote Devices →
NIST SP 800-53 Rev 5 HIGH1 control

Prevent split tunneling for remote devices connecting to organizational systems unless the split tunnel is securely provisioned using [Assignment: organization-defined safeguards].

nist-sp-800-53-revision-5-1-high::SC-7(7) · SC-7(7) Boundary Protection | Split Tunneling for Remote Devices →
NIST SP 800-53 Rev 5 MODERATE1 control

Prevent split tunneling for remote devices connecting to organizational systems unless the split tunnel is securely provisioned using [Assignment: organization-defined safeguards].

nist-sp-800-53-rev-5-moderate::SC-7(7) · SC-7(7) Boundary Protection | Split Tunneling for Remote Devices →

Questions people ask about split tunneling

What is Split Tunneling?
A VPN configuration where only certain traffic is routed through the VPN tunnel while other traffic accesses the internet directly.
Why is Split Tunneling important for compliance?
Split Tunneling is a key concept in Information Security. Understanding split tunneling helps organizations meet regulatory requirements, reduce risk, and demonstrate due diligence during audits. Our compliance platform maps 1,016 frameworks with 316K cross-framework control mappings.
Which compliance frameworks address Split Tunneling?
Split Tunneling appears in the requirement text of CMMC 2.0, FBI CJIS Security Policy, NIST SP 800-53 Rev 5, NIST SP 800-53 Rev 5 HIGH, NIST SP 800-53 Rev 5 MODERATE. Across these standards we have identified 5 controls that name it directly, each linked to the control text on the compliance platform.
Where can I learn more about Split Tunneling?
Explore our compliance framework pages to see how split tunneling applies across different standards and regulations. Our implementation guides provide step-by-step guidance, and the compliance platform offers AI-powered analysis of how this concept maps across 1,016 frameworks.

See how Split Tunneling applies across compliance frameworks

Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.

Explore on Platform
Written and maintained by Gerard Blokdyk, The Art of Service.