topic Re: How to allow particular URL via Global Protect Split Tunnel and DNS should resolve for that particular URL. in General Topics

How to allow particular URL via Global Protect Split Tunnel and DNS should resolve for that particular URL.

tthapa23 — Wed, 18 Sep 2024 19:49:24 GMT

Our BI team has snowflake setup in the azure, they have whitelisted on-prem public ip addresses and Global protect public ip addresses to allow the snowflake access. We have a split tunnel GP VPN so tried with including domain and port number of the snowflake in the global protect config. which is having a DNS resolution issue? is any one have any suggestion or solution for this kind of issue? How to make this split tunnel vpn should work as a full tunnel if they have connected form remotely?

Re: How to allow particular URL via Global Protect Split Tunnel and DNS should resolve for that particular URL.

JayGolf — Wed, 25 Sep 2024 03:12:14 GMT

Hi @tthapa23 ,

So if you try resolving the URLs, im guessing your getting the public IPs? Try creating a private DNS zone for xyz.snowflakecomputing.com in Azure. In the zone you can then configure the various CNAMEs for each of your snowflake URLS and route traffic to your Snowflake endpoints. On your AD servers that you point DNS to for GP clients, forward queries to xyz.snowflakecompting.com to the resolver inbound endpoint. I have more experience in AWS so my terms might be a bit confusing. Hope this points you in the right direction.