Systems and methods for performing split tunneling via different tunnels

A non-transitory computer-readable storage medium having computer-readable code stored thereon for programming a connector application to perform steps of:

• intercepting traffic at a mobile device, the traffic originating from one or more applications on the mobile device and destined for one or more resources located in one of a public cloud, a private cloud, and an enterprise network, wherein the intercepting is performed by a connector application executing on the mobile device by creating a virtual network (TUN) interface and configuring a higher-priority default route to the virtual network interface such that Internet Protocol layer traffic is received at the virtual network interface before being transmitted via an external network interface;
• detecting one or more Virtual Private Network (VPN) profiles associated with the traffic, wherein the detecting comprises determining whether the intercepted traffic is coming from a per-app VPN profile or an enterprise VPN profit;
• and
• forwarding the traffic to a cloud-based system via one or more tunnels based on the one or more VPN profiles detected in the traffic, wherein the one or more tunnels comprise distinct secure tunnels corresponding to different cloud security services of the cloud-based system and operating as separate tunnel processes that do not mix traffic with one another, and wherein the forwarding comprises selecting one of the distinct secure tunnels based on whether the detected VPN profile is the per-app VPN profile or the enterprise VPN profile.