Clientless VPN on Azure platform, possible to configure split tunneling?

clientless looks somewhat like this: you can preload several 'apps' (which are just url bookmarks) and allow/disallow the user to type in urls themselved

I have this topic covered in my upcoming book ;)

Yes! I saw your announcement for your book. :)

Thanks for the clarification. So in other words I had the wrong idea about split tunnelling in clientless vpn portal. So basically whatever applications I listed there is the things I would tunnel and whatever not listed/published there is not tunneled in.

So let's say my clientless VPN portal are hosting applications that are considered operational data. And some users who wants to access YouTube, which is not listed inside my clientless VPN portal which is considered non-operational data, they will be regarded as non tunnelled traffic?

yes, everything accessed through your portal is tunneled, so you can make internal websits available through a secured channel. if your user opens a diffrent browser(tab) to watch a youtube video, that access will be made locally via their own ISP. I believe/jhope the intent is to make more types of applications available in the future so you could do RDP and SSH via the browser, like Pulse Secure (and others) does today

Yes, Indeed. I always see this option with GlobalProtect App. However, I have not been able to source useful articles surrounding clientless VPN AND Split Tunneling. Especially this is on Azure platform so it got me curious if this is less popular function to do so. Perhaps in terms of performance wise?