topic Question on GlobalProtect access route in General Topics

Question on GlobalProtect access route

qq736401987 — Thu, 13 Jul 2017 09:00:30 GMT

Hi All,

I've successfully set up globalprotect for my remote users according to this link https://live.paloaltonetworks.com/t5/Configuration-Articles/Basic-GlobalProtect-Configuration-with-User-logon/ta-p/136099

I have a new problem. I want some users all traffic to go through GlobalProtect tunnel and the other users only intranet traffice to go through GlobalProtect tunnel. How can I do that? Thanks.

Re: Question on GlobalProtect access route

kiwi — Thu, 13 Jul 2017 09:14:11 GMT

Hi @qq736401987,

In GP gateway configuration you can add different client settings for different Users/User groups. You can configure different access routes for each one.

Hope this is what you're looking for.

Cheers !

-Kiwi.

Re: Question on GlobalProtect access route

BPry — Thu, 13 Jul 2017 17:49:46 GMT

@qq736401987,

Essentially it would look something like this,

The access routes are matched the same as the security policies so if I was actually going to use something like this I would want that 'Brandon' config to be above the 'ANY' config.

Re: Question on GlobalProtect access route

qq736401987 — Wed, 16 Aug 2017 04:06:27 GMT

Thanks. It works. Sorry reply so late.