Issue/Question
- What is the difference between full-tunnel and split-tunnel VPN?
Environment
- Oregon State University
- Employee, Student or Associate
- VPN
Resolution
VPN Connection Types
OSU has two types of VPN connections available:
- Full Tunnel (Default) - Routes and encrypts ALL requests through the VPN to OSU, regardless of where the service is hosted. Note that when connected via full tunnel, it is not possible to access local network resources. Full tunnel is generally recommended because it is more secure.
- Split Tunnel - Routes and encrypts all OSU-bound requests over the VPN. Traffic destined to sites on the Internet (including Zoom, Canvas, Office 365, and Google) does not go through the VPN server in split tunnel mode.
For either connection type, use of Duo two-step login is required for all ONID account holders.
Use Split Tunnel or Full Tunnel?
Full tunnel is the better option if you handle confidential data. It is also better to use full tunnel if you are connecting from a network you do not trust, such as in a coffee shop or hotel.
Split tunnel may be necessary if you need to access both local resources and OSU resources at the same time, but it is less secure.
If you are connecting to video conferencing services via Zoom, Teams or others, it is generally recommended that you disconnect from the VPN first to improve performance.
For more information, see: VPN - When to Use VPN
Assistance
For assistance, contact the Service Desk.