topic Re: Split Tunnel Domain & Application Cisco Umbrella Issue in GlobalProtect Discussions

Split Tunnel Domain & Application Cisco Umbrella Issue

jeff6strings — Mon, 30 Nov 2020 15:08:46 GMT

We have one GlobalProtect Portal and 3 Gateways. This one Gateway is version 9.0.9-h1, and the GlobalProtect client version is 5.2.3-22. For testing, on this one Gateway, I enabled Split tunnel Domain and Application for *.webex.com and *.zoom.us.

I'm testing from home with two laptops, and both are connected to this same GP Gateway. Laptop 1 does not have all our client-side security software, and I see the traffic for both these domains going out the local network interface/Internet. Laptop 2, which has all our client-side security software, I see traffic for both domains going down the VPN.

I think the problem with laptop 2 may be Cisco Umbrella? Has anyone seen this issue with security software?
Thanks for any help.

Jeff

Re: Split Tunnel Domain & Application Cisco Umbrella Issue

jeff6strings — Wed, 27 Jan 2021 22:55:27 GMT

We confirmed the domain exclusion is a Cisco Umbrella issue but still like to know if anyone else has had this issue and, if so, what was your resolution?

Thank you.

Jeff

Re: Split Tunnel Domain & Application Cisco Umbrella Issue

Nisha_Bharadia — Wed, 24 Mar 2021 21:02:44 GMT

Any update on this with cisco umbrella?

Re: Split Tunnel Domain & Application Cisco Umbrella Issue

sebastianvd — Fri, 26 Mar 2021 08:43:26 GMT

split domain had some issues on various versions.

A hotfix for 5.2.5 has been released with a lot of fixes btw: Addressed Issues in GlobalProtect App 5.2 (paloaltonetworks.com)

Re: Split Tunnel Domain & Application Cisco Umbrella Issue

jeff6strings — Thu, 27 May 2021 15:52:48 GMT

Thank you as we upgraded but still not working. I read the Addressed Issues and it's impressive how many could have been the issue.

Re: Split Tunnel Domain & Application Cisco Umbrella Issue

AmolMohite — Thu, 10 Mar 2022 16:12:50 GMT

we have also same issue... We have configured split tunnel domain for *.example.com.. Its not working when Cisco Umbrella agent is active...once we have disabled the agent it is working as expected...there is one option on umbrella to offload URL domain, that will fallback the request to internal GP client DNS instead going towards opendns.