Local breakout of MS Teams when using EntraID with MX SecureConnect

[Masaharu_K]

I am connecting to SecureConnect in MX.
I want to set up a local breakout to improve VoIP quality.

Security &SD-WAN > SD-WAN & Traffic Shaping > Localbreakout> (outside VPN rule )Major applications

I have set “Skype &Teams” in this setting.
But it seems that the VPN is also excluding the authentication communication of EntraID other than the VoIP communication of Teams.

How is it in your environment?

I would like to have VPN to SecureConnect for EntraID authentication and local breakout for Teams only.

[alemabrahao · Accepted solution]

You can try setting up specific VPN exclusion rules to ensure that only VoIP traffic for Teams is excluded from the VPN, while authentication traffic for EntraID remains inside the VPN.

VPN Full-Tunnel Exclusion (Application and IP/URL Based Local Internet Breakout) - Cisco Meraki Docu...

[Masaharu_K]

Thanks for your advice!

I know that I can create rules by destination URL/IP for Teams.(Custom)

When specified on a per-application basis below, Traffics for EntraID other than Teams will also be broken out.

[alemabrahao]

Yes, but you can add a specific URL or group of URLs.

[Masaharu_K]

Thanks.

I will try to set specific URL of MS-Teams!