Mobile devices used for work often require always-on security, but routing all traffic through the gateway can introduce latency that impacts application performance and raises privacy concerns when employees use corporate-owned or personally-owned devices for personal activities. Forwarding profiles now extend to iOS, Android, and ChromeOS devices running Prisma® Access Agent, offering a subset of the functionality available for desktop devices. You create forwarding rules that match traffic based on IP address destinations and configure connectivity options to send traffic through the gateway, direct to destination, or block it. This allows you to maintain always-on connectivity while excluding specific traffic to address performance concerns and meet privacy requirements including GDPR compliance. Rules will be consolidated top-down based on the destination interface to determine the access route for traffic forwarding.