FabrizioF

however I seem to have understood that in on-premises mode, it is possible to change this parameter instead ...it is a bug / limitation of Nebula mode

in the end I "solved" by blocking everything as much as possible, Looking at the logs I then unblocked the sites required by the OneDrive app ... at the moment it seems to work, fingers crossed

Hi Adam, i have created route policy on NSG50 but not on the other firewall (through which all internet traffic will go out). His support has said me that isn't necessary.

Thanks Adam for the reply I did not understoond well if I have to do the route policy on both firewall or only on the NSG50. From the site where the NSG50 is, I want to direct all internet traffic to the non-Zyxel firewall thanks again