3. Troubleshooting Mac

Issue	Troubleshooting instructions
How can I confirm traffic is going through the tunnel as expected?	Traffic steering with conditional access from client and you want to check if Microsoft or application ( included app in traffic steering) is routed via Exium tunnel, can be done in 2 ways 1. Check on office365 for source IP and IP should show Exium IP 2. You can run tracroute command from client .. you can following command from terminal traceroute microsoft.com You will see traceroute with traffic going via 172.x.x.1 - Exium Tunnel end point. this indicate traffic is routed through tunnel.
Exium SASE Agent (Client) on windows is connected but Internet does not work	On Mac terminal , Please run “nslookup google.com”. If that shows DNS timed out, this may be due client connection handshake may be failing There are two possible reasons for this: * Firewall Blocking Ports: The firewall might be blocking the ports used by the SASE client. To resolve this, please [1] open the required ports in your local firewall. * Stale Router Entries: A home or office router might have a stale port entry. Rebooting the router should clear these stale entries.