topic Re: Global Protect 3.1.1 PAN-OS 7.1.5 split tunneling issue in General Topics

Global Protect 3.1.1 PAN-OS 7.1.5 split tunneling issue

TranceforLife — Tue, 09 May 2017 08:52:18 GMT

Another one,

Split Tunneling simply doesn't work:

When trying to access resources on the Internet (google.com) all traffic is routed to the tunnel where no policy for the Internet access, hence no internet.

Re: Global Protect 3.1.1 PAN-OS 7.1.5 split tunneling issue

fjwcash — Fri, 12 May 2017 20:08:58 GMT

What's your client OS?

Android doesn't support split-tunnelling.

iOS sometimes supports split-tunnelling, but requires some manual twiddling of networking options on the device.

Windows works great with split-tunneling, although we've only tested 7 Pro.

Supposedly MacOS X supports split-tunneling, but we haven't tested it.

IOW, if you're not using Windows on the client, split-tunneling won't work. It's a routing issue on the client, not a GlobalProtect issue.

Cheers,

Freddie

Re: Global Protect 3.1.1 PAN-OS 7.1.5 split tunneling issue

TranceforLife — Fri, 12 May 2017 21:05:20 GMT

@fjwcash thanks for your feedback

Got some updates but was busy and was not able to post here:

The issue is only on the mobile devices and the native Linux VPNC. Windows clients are working fine (initially was some misconfiguration). l have found a quite nice article (FYI) . See below:

https://live.paloaltonetworks.com/t5/Configuration-Articles/Split-Tunneling-for-VPNC-Client-on-Linux-Distributions/ta-p/57244

So as you have already mentioned manual static routing is required in order for split tunnelling to work on non-native VPN clients.

"Good" to know that split-tunneling is not supported on the Android.

Thanks,

Myky