topic Re: Split tunnel VPN inclusion rule - traffic dropped in General Topics

Split tunnel VPN inclusion rule - traffic dropped

000000 — Mon, 29 Oct 2018 17:13:25 GMT

Hello Community,

I need to allow traffic to come down the VPN tunnel rather than the Split Tunnel.
I have addred a VPN tunnel inclusion rule on the GlobalProtect Gateways as described in this article:

https://www.paloaltonetworks.com/documentation/80/pan-os/newfeaturesguide/globalprotect-features/split-tunnel-to-exclude-by-access-route

The logs shows that one of the destination is "allow" with aged-out, the second is dropped.
To me it seems like some routing issue, but I just don't know why this is dropped by the firewall since there is inclusion?
I am sure I am missing something ...

Thanks!

Re: Split tunnel VPN inclusion rule - traffic dropped

Raido_Rattameister — Mon, 29 Oct 2018 21:40:11 GMT

Can you provide screenshot of the log?

Re: Split tunnel VPN inclusion rule - traffic dropped

000000 — Tue, 30 Oct 2018 17:14:32 GMT

It's now resolved.
It turns out that firewall rule was missing. (I wasn't the one who did the initial implementation)
I've thought it's a lot more complex nitty-gritty, but in the end it all comes to firewall rule.