I am configuring the per app VPN deployment for iOS application and want to configure the match domain per app rules so that only the traffic from that match domain will trigger the VPN for the included app. I found the documentation on portal but I can't find any MDM related page. https://developer.apple.com/documentation/networkextension/neapprule/1406488-matchdomains

I have configured includedRoutes and excludedRoutes with specific IP addresses and masks. All applications, except for the app store, are following the access routes as intended. However, app store traffic is bypassing the defined access routes and going over the tunnel.

I have configured includedRoutes and excludedRoutes with specific IP addresses and masks. All applications, except for the app store, are following the access routes as intended. However, app store traffic is bypassing the defined access routes and going over the tunnel. The routing method is set to be destination IP.