topic Re: Split tunnel but I see that packets from Teams calls are being sent over the VPN connection in GlobalProtect Discussions

Split tunnel but I see that packets from Teams calls are being sent over the VPN connection

Tthapa — Mon, 28 Feb 2022 21:23:13 GMT

We have a GP split tunnel setup, MS Teams calls should not go over VPN, but I see that packets from Teams calls are being sent over the VPN connection. what's your recommendation to provide an alternate path that bypasses the VPN for Teams traffic?

Re: Split tunnel but I see that packets from Teams calls are being sent over the VPN connection

JoergSchuetter — Mon, 28 Feb 2022 22:11:32 GMT

Hello @Tthapa

There are programs which simply try every available interface. You need to ensure that the direct way is perceived as "better".

If you grant direct access to MS-Teams destination IPs (13.107.64.0/18, 52.112.0.0/14, 52.120.0.0/14) and allow only http(s) via the vpn tunnel to MS-Teams (do not permit 3478...3481 UDP via VPN), then chances are very high that the packets will go the split tunnel path.

Re: Split tunnel but I see that packets from Teams calls are being sent over the VPN connection

Tthapa — Tue, 01 Mar 2022 22:11:32 GMT

@JoergSchuetter - Thank you so much for the advice. I will check my config.