topic Re: Is it possible to disable split tunneling for a single GlobalProtect cl in General Topics

Is it possible to disable split tunneling for a single GlobalProtect client?

FrankMurray — Thu, 30 Apr 2020 17:17:51 GMT

We have split-tunneling enabled for our 400+ remote users, but recently was asked if we can disable split-tunneling for a single GlobalProtect client. We are running PAN-OS 8.1 code and GlobalProtect 5.0. I don't see a way but thought I'd ask.

Thanks

Re: Is it possible to disable split tunneling for a single GlobalProtect cl

Mick_Ball — Thu, 30 Apr 2020 21:32:55 GMT

This can be done...

on the gateway(s) create a client config with no split tunnel and add the single user to this config and place it at the top of the agent configs, the single user will get this config and all others will get the other.

Re: Is it possible to disable split tunneling for a single GlobalProtect cl

jdelio — Thu, 30 Apr 2020 21:50:24 GMT

I understand what you are trying to do, but I cannot think of a way you could limit it to just 1 client.

Let's see if anyone else has been successful.

Re: Is it possible to disable split tunneling for a single GlobalProtect cl

FrankMurray — Fri, 08 May 2020 16:40:08 GMT

Tested- and working! Thanks!