topic Global Protect 8.1 in General Topics

Global Protect 8.1

junior_r — Tue, 10 Jul 2018 15:48:23 GMT

Hi,

Anyone know what proccess I can split tunnel to allow printing locally on GP 8.1?

Thanks

Re: Global Protect 8.1

LukeBullimore — Tue, 10 Jul 2018 19:43:30 GMT

Do you have include access route subnets configured? If so, this should be more than enough provided that the printers IP does not conflict with the subnet within the include list.

If not, then you can try exluding the process of "Print Spooler", its full name is "spoolsv.exe" from split tunneling - although I have not tried this myself so there may be another process that handles printing over TCP/IP.

Check out the section "Configure a split tunnel to include or exclude public applications based on the application process name:" in the below documentation.

https://www.paloaltonetworks.com/documentation/81/pan-os/newfeaturesguide/globalprotect-features/split-tunnel-for-public-applications

or step12 from the GP 8.1 admin guide.

https://www.paloaltonetworks.com/documentation/81/globalprotect/globalprotect-admin-guide/globalprotect-gateways/configure-a-globalprotect-gateway#id0687b049-6664-4054-96dc-ba880f8c92c9

Thanks,

Luke.

Re: Global Protect 8.1

BPry — Tue, 10 Jul 2018 20:45:45 GMT

@junior_r,

As @LukeBullimore pointed out access routes are likely what you are looking for here if you wish to configure a split-tunnel connection. The only way that this wouldn't work is if the client in question is connecting from the same IP space that you have specified for the split-tunnel (ie: Client is on a 192.168.1.0/24 network and your access routes include 192.168.1.0/24)