A user logs into a SSL VPN portal and activates the tunnel mode. The administrator has enabled split tunneling. The exhibit shows the firewall policy configuration: Which static route is…

In SSL VPN tunnel mode with split tunneling, the FortiGate pushes specific routes to the client's routing table, which correspond to the destination networks defined in the firewall policies that permit traffic from the SSL VPN users, such as the `Internal_Servers` address object in this scenario.

While the tunnel mode widget configures general tunnel parameters, the specific routes pushed to the client for split tunneling are derived from the destination networks allowed in the firewall policy, not directly from the widget's general configuration.

A default route (0.0.0.0/0) would direct all traffic through the VPN, which is characteristic of full tunneling, not split tunneling, where only specific traffic goes through the tunnel.

SSL VPN global settings configure overall parameters and IP pools for clients, but the specific routes for split tunneling are determined by the firewall policies dictating accessible destinations through the VPN tunnel.