Use exclusions to prevent any resources (including host names, IP addresses, or domains) from being redirected through the appliance. When specifying a domain, you can also use the wildcard characters asterisk (*) and question mark (?).
In SMA1000 12.4.3 AMC:
Connect Tunnel clients are capable of excluding the traffic on the fly.
Refer to the Using the Exclusions and Selecting Tunnel Access Methods for a Community sections.