Breakout from the vpn conceivable?

[BruderB]

Hello community,

I turn to you with a question that I thought it should be asked frequently, but I have not found any thread about it:
There should be a vpn gateway running (with sslvpn or wireguard) for some roadwarriors. The clients should send all traffic through this tunnel. Exceptions are to be constructed for this last rule, so that some traffic breaks out of the tunnel and communicates directly with selective services on the Internet. Is this feasible? How??

Specifically, we are talking about M$365 services that also change their URLs and ports, i.e. the breakout rules would have to be mutable.....

Difficult thing??

Thanks and greetings,

Brother B

Translated with www.DeepL.com/Translator (free version)