topic Re: GlobalProtect and using split tunneling in General Topics

GlobalProtect and using split tunneling

JimMcGrady — Mon, 23 Mar 2020 03:08:22 GMT

Global protect has the handy feature of excluding select destinations from being sent over the vpn. For example, setting

(Split Tunnel - Domain and Application - Exclude Client Application Process Name) https://docs.paloaltonetworks.com/globalprotect/4-1/globalprotect-app-new-features/new-features-released-in-gp-agent-4_1/split-tunnel-for-public-applications

Can this feature make use of Windows environment variables such as LOCALAPPDATA? Some apps install in the user's path rather than in a user-independent path.

Re: GlobalProtect and using split tunneling

Mick_Ball — Tue, 24 Mar 2020 13:11:41 GMT

yes...

%LOCALAPPDATA%\Microsoft\Teams\current\Teams.exe

if this is placed in the exclude client application then Teams is not tunneled.

Re: GlobalProtect and using split tunneling

Pavel_Jiracek — Fri, 10 Apr 2020 14:35:10 GMT

I'm trying to exclude Teams from the GP tunnel, too. Is there a way to verify the traffic is not going via the tunnel? I still see some ms-teams traffic on the gateway.

Thanks

Re: GlobalProtect and using split tunneling

Mick_Ball — Fri, 10 Apr 2020 16:48:45 GMT

Download and run currports. You can add teams.exe as a filter. Or you can see all applications and what way they are going.

it shows all sessions and the source ip. So source ip vpn is tunnelled and source ip lan is direct.

HTH.

Re: GlobalProtect and using split tunneling

Pavel_Jiracek — Tue, 14 Apr 2020 15:36:40 GMT

Thanks! Currports is a great tool.

Re: GlobalProtect and using split tunneling

Jonathan.Bennett — Thu, 15 Oct 2020 15:03:30 GMT

You can also use Microsoft's tool, https://connectivity.office.com/

They have you download an .exe, run it, then it tells you if various MS services are running over the tunnel or split

Re: GlobalProtect and using split tunneling

MannyCosta — Thu, 18 Apr 2024 21:44:12 GMT

I used this for Zoom also %AppData%\Zoom\bin\Zoom.exe