topic Global Protect Policy enforcement in General Topics

Global Protect Policy enforcement

FWPalolearner — Fri, 10 Apr 2020 09:33:11 GMT

Hi All ,

I have an issue

Is there a way to use Global Protect to enforce web or URL filtering policies when users are not on the corporate LAN ? for now, when users work remotely , they bypass all web and URL filtering and security policies and download whatever threats they want.

Regards

Re: Global Protect Policy enforcement

Mick_Ball — Fri, 10 Apr 2020 10:16:33 GMT

Not sure what you mean, do they not connect back into the corp network via GP when working remotely.

Re: Global Protect Policy enforcement

FWPalolearner — Fri, 10 Apr 2020 10:20:00 GMT

Yes they connect to GW

But as we are using Split tunneling which allows them to use Local Internet for non corp traffic

We still want to enforce URL access restrictions so that they only access legitimate URLS . but we dont want to disable split tunneling

So is there a way

Re: Global Protect Policy enforcement

Mick_Ball — Fri, 10 Apr 2020 10:27:06 GMT

no this s is not possible.

you should perhaps review your split tunnel policies and decide what is acceptable.

we only allow office365 and other trusted services via split tunnel.

check on your firewall for the heavy usage sites and then decide if they can be excluded from the tunnel....