Application bypass in Juniper Secure Connect

You can use Juniper Secure Connect to send specific application traffic directly to its destination instead of passing it through the VPN tunnel. You can accomplish this functionality by specifying domain names and protocols for the specified applications that would bypass the VPN tunnel. The bypass feature simplifies the administrator and end-user experience. When you configure the application bypass feature and establish a remote-access VPN tunnel, the configuration automatically enables a stateful firewall rule rejecting incoming connections on other adapters, which prevents the device from becoming a bastion host. You can configure this feature on SRX Series firewalls and on vSRX 3.0 virtual firewalls by using application-bypass at the [edit security remote-access client-config name ] hierarchy level.