topic Exclude Zoom from GlobalProtect in GlobalProtect Discussions

Exclude Zoom from GlobalProtect

securehops — Fri, 09 Jul 2021 16:12:42 GMT

Hello,

I'm working on excluding Zoom from GlobalProtect. I came across this article

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000PPDSCA4&lang=en_US%E2%80%A9

For windows, there is an error, instead of excluding %AppData%\Roaming\Zoom, you just need to use %AppData%\Zoom, as %AppData% already takes you into the roaming folder. With this correction, I'm not seeing any issues on Windows OS

For macOS, I'm not having any success. If I exclude path /Applications/zoom.us.app/Contents/MacOS/zoom.us , the users cannot even join a meeting. They get an "unable to connect" message. I tried removing ".app" from the path. This allows them to connect but I see zoom-meeting (443/8801) traffic going through the firewalls.

I should not this is all without excluding any of the domain names

Has anyone been able to get this to work on macOS?

Re: Exclude Zoom from GlobalProtect

LAYER_8 — Thu, 05 Aug 2021 14:00:06 GMT

Perhaps something to try, if you go to your GlobalProtect Gateway settings, exclude video traffic without needing to specify application path?

Re: Exclude Zoom from GlobalProtect

securehops — Thu, 05 Aug 2021 14:02:46 GMT

@LAYER_8 thanks for the response. I was able to get it working. The issue I was having was due to a sophos limitation. Seems to be fixed in their latest version

Re: Exclude Zoom from GlobalProtect

ejohn-nia — Wed, 22 Sep 2021 19:43:03 GMT

@securehops Did you remove the application exclusions completely and still have it work? I have noticed my MacOS users are having some issues with the failure to connect until they connect to the VPN for the first time.