There are risks to using VPN split tunneling, and these must be weighed against the benefits. Those in charge of information security in corporate environments use defensive technology to protect endpoints and stop users from carrying out certain tasks, whether intentionally or by accident.

Traditionally, users can circumvent proxy servers and other devices, which are put in place to regulate and protect network usage. Therefore, if a user is working from a network that is not secure, they can put the organization’s network at risk. If a hacker is able to compromise the network the user is working from by means of split tunneling, the hacker may be able to put the rest of the organization’s network in jeopardy as well. As long as a company computer is compromised, the organization’s network remains at risk too.

Users may also bypass the Domain Name Systems (DNS), which aids in identifying and repelling intruders, devices that prevent data loss, as well as other devices and systems. Each of these devices or systems plays a significant role in protecting data and communication. So circumventing any of them just to reduce traffic or increase performance may not be advantageous.

One function of proxy servers is to limit traffic to websites of a questionable nature or reputation. They also allow organizations to keep track of what their employees are doing or accessing. Additionally, proxies offer protection to corporate endpoints by preventing communication with command-and-control (C&C) servers manned by hackers. Another benefit is to monitor traffic and regulate it. An example are proxies that limit or prevent access to sites like Spotify, YouTube, or Netflix, which stream music, movies, and other forms of entertainment.

If an employee’s system is infected, the data it sends to C&C systems in a split tunneling setup will not be visible to corporate IT. While the device or network is compromised and in communication with the invading system, the user may spend their time accessing disreputable sites on company time. And because split tunneling is enabled, the organization is unaware of the security risk or the loss of employee productivity.