Zero Trust with Split Tunnels Restricting Outook

We’ve been using a Zero Trust tunnel for a year or two and it works fine connecting outside users to the local network. I’ve added the Microsoft Office 365 Exclude rules in Split Tunnels, but when users try to access Outlook it is either incredible slow, drops the connection or doesn’t load at all.

It is my understanding that the the Exclude rules should basically ignore anything Office 365 related, but something is certainly up because as soon as Couldflare is off Outlook works just fine.

Any suggestions?

Thank you