topic Re: Split Tunnel - Exclude Client Application in General Topics

Split Tunnel - Exclude Client Application

DevPatel — Tue, 15 Oct 2024 15:41:22 GMT

Hello,

I am setting up a new Global Protect gateway.

We previously havent setup Global Protect (GP) before with Split tunnel so this is my first time and its not going smoothly..

i am trying to exclude client applications for some software we use. being a media company, we often need to tranfer large files to partners. there are well known applications called Signiant and Aspera that are commonly used in the media world.

i am excluding the file path for Aspera in the exlude section, however the traffic is still routing over GP rather than my local internet.

My setup is:
Access Route - Include = 0.0.0.0/0

Domain and Application - Exclude client app... = C:\Program Files\IBM\Aspera Connect\bin\asperaconnect.exe

however, the traffic is still passing through the firewall as i can see the traffic in the monitoring tab (albeit blocked as i havent allowed it)

What am i doing wrong.. if anything?!

Re: Split Tunnel - Exclude Client Application

BPry — Tue, 15 Oct 2024 15:44:42 GMT

@DevPatel,

Just to verify, do you have an actual GlobalProtect subscription?

Re: Split Tunnel - Exclude Client Application

DevPatel — Tue, 15 Oct 2024 15:45:47 GMT

@BPry - yep, i do.

Re: Split Tunnel - Exclude Client Application

BPry — Sat, 19 Oct 2024 05:31:51 GMT

@DevPatel,

Not being familiar with Aspera Connect, the next thing that I would be looking to verify is that traffic is actually being sourced from that executable. A very brief search I wasn't able to easily see if the typical installation uses additional executables or not, but I did see some references that appear to indicate that it may actually install some components in Program Files but also uses Program Files (x86) in addition to that. I would validate that you aren't simply missing some of the executables actually sending traffic for this to work appropriately.