

Following the scenario above and adding the 167.20.10.0/24 network to the 'ED-RemoteAccess_Exclusions' group will achieve this. To de-activate your data filter, follow the steps below: Step-1: Navigate to the ‘admin’ section of your GA4 property.

To put this into a scenario, lets say you want all traffic to be routed to the gateway (like it is in hub mode), apart from 167.20.10.0/24 (some random network I thought of, insert yours here) - you want the clients to route this out of their local connection rather than via the security gateway.
#Add my ip hide to exclusions install

Set the 'ED-RemoteAccess' group as the Remote Access encryption domain on the gateway topology. Go to Clarity > Settings > IP blocking, and select Block IP address.Create a new "group with exclusions" called 'ED-RemoteAccess', reference the 'All_Internet_Group' we created as the main group and the 'ED-RemoteAccess_Exclusions' we created as the exclusion group.Add all of the hosts/networks you'd like to be excluded from hub mode (I.E, routed locally on the client's end rather than across the VPN to the gateway). Create a new network group named 'ED-RemoteAccess_Exclusions'.Create a new network group named 'All_Internet_Group', and add the default 'All_Internet' object to it.Ensure Hub Mode is set to ALLOW on the gateway object under VPN Clients > Remote Access.Ensure "Route all traffic to gateway" is set to NO in Global Properties > Remote Access > SecureClient Mobile & Endpoint Connect.If you'd like configure the Remote Access routing to essentially route all traffic to the gateway, EXCEPT a certain list of hosts/subnets, then you need to do the following:
