Could not get it to work for devices included in policies. e.g.:
Default policy - ISP connection;
VPN policy - wireguard connection;
NOVPN policy - ISP connection;
Tests:
1. Device in Default policy, add dns route to youtube.com via VPN interface, traceroute device->youtube - OK (traffic goes through VPN)
2. Device in NOVPN policy, add dns route to youtube.com via VPN interface, traceroute device->youtube - FAIL (traffic goes through ISP)
3. Device in VPN policy, add dns route to youtube.com via ISP interface, traceroute device->youtube - FAIL (traffic goes through VPN)
Is it possible to either respect the DNS routing (just like regular static routing does) for policies-using devices or allow policy-based routing to use object groups?
PS: (KN-1012, 5.0 Beta 1)