Device posture checks with Split Tunnel (Include IPs and Domains)
Looking for some direction. I'd like to setup device posture checks (specifically Warp client checks) with Split tunnels configured to Include mode.
If the Split tunnel is configured to the default Exclude mode, then everything works as expected. Going to https://help.one.cloudflare.com/ will show that the Device has Warp enabled and HTTP filtering has Warp and Gateway.
In Include mode, however, it does not seem to work even after including the Zero Trust domains mentioned in the documentation. Doing a Test run with a Policy that uses the Warp client checks succeeds, but going to https://help.one.cloudflare.com/ will show that the Device does not have Warp installed. Running
Is there something I can do to debug this? My assumption is there are more routes that are actually needed to be included in the Split Tunnel configuration if Warp client checks are desired.
If the Split tunnel is configured to the default Exclude mode, then everything works as expected. Going to https://help.one.cloudflare.com/ will show that the Device has Warp enabled and HTTP filtering has Warp and Gateway.
In Include mode, however, it does not seem to work even after including the Zero Trust domains mentioned in the documentation. Doing a Test run with a Policy that uses the Warp client checks succeeds, but going to https://help.one.cloudflare.com/ will show that the Device does not have Warp installed. Running
warp-cli debug postureIs there something I can do to debug this? My assumption is there are more routes that are actually needed to be included in the Split Tunnel configuration if Warp client checks are desired.
Welcome to the official Cloudflare Developers server. Here you can ask for help and stay updated with the latest news
86,740Members
Resources
Similar Threads
Was this page helpful?
