https://live.paloaltonetworks.com/t5/globalprotect-discussions/globalprotect-split-tunneling-and-split-dns/m-p/444843#M2090 <P>We have regional Portals/Gateways in both EMEA and APAC. The requirement is to have split tunneling disabled. However, we want to guard against a users in one country connecting to the VPN gateway in another country and requesting a public resource (Google.com for example) and having that page returned in the wrong language. Because the DNS request would traverse the VPN tunnel to a different country, the recursive lookup would be from the country hosting the gateway and would likely return the site in that countries language. This is a non-issue for the US but a problem in APAC and EMEA. As such, is there a way with GlobalProtect to allow split DNS <EM>without</EM> enabling split tunneling.&nbsp;</P> Mon, 01 Nov 2021 19:23:37 GMT tyates 2021-11-01T19:23:37Z https://live.paloaltonetworks.com/t5/globalprotect-discussions/globalprotect-split-tunneling-and-split-dns/m-p/444843#M2090 <P>We have regional Portals/Gateways in both EMEA and APAC. The requirement is to have split tunneling disabled. However, we want to guard against a users in one country connecting to the VPN gateway in another country and requesting a public resource (Google.com for example) and having that page returned in the wrong language. Because the DNS request would traverse the VPN tunnel to a different country, the recursive lookup would be from the country hosting the gateway and would likely return the site in that countries language. This is a non-issue for the US but a problem in APAC and EMEA. As such, is there a way with GlobalProtect to allow split DNS <EM>without</EM> enabling split tunneling.&nbsp;</P> Mon, 01 Nov 2021 19:23:37 GMT https://live.paloaltonetworks.com/t5/globalprotect-discussions/globalprotect-split-tunneling-and-split-dns/m-p/444843#M2090 tyates 2021-11-01T19:23:37Z