Local internet breakout - VPN exclusion rules with Protocol DNS

[dmbooth]

Hi,

I've had some conflicting information so would appreciate if anyone could confirm please? When configuring Local internet breakout - VPN exclusion rules and using Protocol DNS, if you specify a domain is a wildcard (i.e. all subdomains) implied, or does it only apply to exact hostname matches? Thanks.

[alemabrahao]

I guess, If you specify a domain like example.com, it will match both example.com and any subdomains, like mail.example.com, api.example.com, etc.
So you don't need to use the "*" wildcard.

VPN Full-Tunnel Exclusion (Application and IP/URL Based Local Internet Breakout) - Cisco Meraki Docu...

[Blue_Bird]

You can find similar  previous discussion here:

https://community.meraki.com/t5/Security-SD-WAN/Internet-Breakout-using-DNS-entries/m-p/248507

Thanks