topic Split tunnel specific URL only, not entire site? in GlobalProtect Discussions

Split tunnel specific URL only, not entire site?

darren_g — Thu, 16 Jun 2022 23:34:01 GMT

Good day folks.

I have a situation where I need to split-tunnel a specific URL from a company web site - but not the whole site if I can avoid it.

For example

https://www.mysite.com/admin - split tunneled to VPN clients.

https://www.mysite.com - not split tunneled to VPN clients.

The /admin/ URL is access list filtered - I have obviously been able to add the VPN public IP address and corporate exit point to the access control, but with so many staff still working remote, this doesn't work when they're not in the corporate office.

Is this possible? I know I can split tunnel the entire domain - and am doing this for other situations - but can I do just the one URL from within the domain? Or will I have to add the entire domain and just tell people to live with it?

Thanks

Re: Split tunnel specific URL only, not entire site?

BPry — Sat, 18 Jun 2022 05:21:43 GMT

@darren_g,

While the firewall will allow you to configure a defined URL, I believe that this only actually works from a domain aspect. So while you could configure mysite.com/admin, I believe that the entire mysite.com would be what's actually analyzed for split-tunnel configuration. I don't think you can get that specific with include/exclude domain entries.

Re: Split tunnel specific URL only, not entire site?

darren_g — Sun, 19 Jun 2022 23:19:54 GMT

That was what I was afraid the answer was going to be.

Oh well. Thanks for confirming!