article Nominated Discussion: Configure Split Tunneling by Domain in General Articles

article Nominated Discussion: Configure Split Tunneling by Domain in General Articles https://live.paloaltonetworks.com/t5/general-articles/nominated-discussion-configure-split-tunneling-by-domain/ta-p/1234122 <P><SPAN>This Nominated Discussion Article is based on the post "<A id="link_2_6b9d6c0119efce_7e862" class="page-link lia-link-navigation lia-custom-event" href="https://live.paloaltonetworks.com/t5/general-topics/configure-split-tunneling-by-domain/m-p/1233028" target="_blank" rel="noopener">Configure Split tunneling by domain</A></SPAN><SPAN>" by <a href="https://live.paloaltonetworks.com/t5/user/viewprofilepage/user-id/85066">@BigPalo</a> </SPAN><SPAN>and responded to by <a href="https://live.paloaltonetworks.com/t5/user/viewprofilepage/user-id/15603">@Raido_Rattameister</a> and <a href="https://live.paloaltonetworks.com/t5/user/viewprofilepage/user-id/43480">@BPry</a>  </SPAN><SPAN>Read on to see the discussion and solution!</SPAN></P> <P> </P> <DIV class="lia-message-template-content-zone"> <BLOCKQUOTE> <P>Hi,</P> <P>I just configured split tunneling by domain using this domain test: *.portal.microsoft.com (port 443)</P> <P>But i can not see this traffic going into the tunnel. how can I troubleshoot this?</P> </BLOCKQUOTE> <P> </P> <P>Note: If you configure split tunneling for a domain then you effectively configure this domain not to be routed into the tunnel but directly towards Internet.</P> <P> </P> <P>Some considerations:</P> <P> </P> <UL> <LI>Do you have a GlobalProtect license so that you can actually utilize this functionality?</LI> <LI>Have you verified for sure that the traffic isn't attempting to utilize QUIC? This functionality only works with TCP traffic and if your browser is using QUIC (which is UDP) it won't function properly.</LI> <LI>What agent version are you using.</LI> </UL> <P> </P> <P>As far as troubleshooting goes you'll want to set your client logging to debug and look in the logs for the domain in question and look for an entry in PanGPS.log that looks like what is denoted below:</P> <P> </P> <P> </P> <LI-CODE lang="markup">(P6668-T26348)Dump (2039): 07/04/25 03:02:58:982 Domain name wxt-general-ingressgateway.acmhwxt-prd-1.prod.infra.webex.com matches exclude wildcard domain</LI-CODE> <P> </P> <P><BR />This will tell you whether it's matching your rules or not. </P> <P> </P> </DIV> Thu, 19 Feb 2026 11:06:23 GMT kiwi 2026-02-19T11:06:23Z Nominated Discussion: Configure Split Tunneling by Domain https://live.paloaltonetworks.com/t5/general-articles/nominated-discussion-configure-split-tunneling-by-domain/ta-p/1234122 <P><SPAN>This Nominated Discussion Article is based on the post "<A id="link_2_6b9d6c0119efce_7e862" class="page-link lia-link-navigation lia-custom-event" href="https://live.paloaltonetworks.com/t5/general-topics/configure-split-tunneling-by-domain/m-p/1233028" target="_blank" rel="noopener">Configure Split tunneling by domain</A></SPAN><SPAN>" by <a href="https://live.paloaltonetworks.com/t5/user/viewprofilepage/user-id/85066">@BigPalo</a> </SPAN><SPAN>and responded to by <a href="https://live.paloaltonetworks.com/t5/user/viewprofilepage/user-id/15603">@Raido_Rattameister</a> and <a href="https://live.paloaltonetworks.com/t5/user/viewprofilepage/user-id/43480">@BPry</a>  </SPAN><SPAN>Read on to see the discussion and solution!</SPAN></P> Thu, 19 Feb 2026 11:06:23 GMT https://live.paloaltonetworks.com/t5/general-articles/nominated-discussion-configure-split-tunneling-by-domain/ta-p/1234122 kiwi 2026-02-19T11:06:23Z