topic Re: Force GlobalProtect client to only apply to 1 of 2 ethernet connections in General Topics

Force GlobalProtect client to only apply to 1 of 2 ethernet connections

bralston7 — Mon, 11 May 2020 19:13:32 GMT

I have 2 physical ethernet ports on my Windows PC. 1 is for external internet and connecting to work VPN. The other is for a local-only ethernet network. When I connect to my office VPN via GlobalProtect, I lose access to the devices on my local-only network. How can I tell GlobalProtect to only apply to traffic on ethernet port 1? Why is it redirection all ports in the first place?

Re: Force GlobalProtect client to only apply to 1 of 2 ethernet connections

KunalChopra — Mon, 11 May 2020 19:46:11 GMT

Hey , just enable the split tunneling and add IP's of your office network for which vpn connection should work otherwise all other remaining traffic would go by other connection.

So yes enable split tunnel in gateway config of gp

Hope it helps

Re: Force GlobalProtect client to only apply to 1 of 2 ethernet connections

bralston7 — Mon, 11 May 2020 20:04:39 GMT

Please elaborate on where I would find such a setting. I see no client-side settings involving split-tunnel in my Global Protect app. Is this something that has to be done on VPN server side?

Re: Force GlobalProtect client to only apply to 1 of 2 ethernet connections

KunalChopra — Mon, 11 May 2020 20:20:12 GMT

follow this link and you will get to knoq

https//docs.paloaltonetworks.com/pan-os/8-0/pan-os-new-features/globalprotect-features/split-tunnel-to-exclude-by-access-route

Please mark this as solution if you get the resolution .This will help others.

Re: Force GlobalProtect client to only apply to 1 of 2 ethernet connections

bralston7 — Mon, 11 May 2020 20:33:20 GMT

That is an administrator-side configuration and I have no access or authority to change. I'm the client.

However, there was a promising lead at the bottom of that page that I will check out:

https://docs.paloaltonetworks.com/globalprotect/7-1/globalprotect-admin/set-up-the-globalprotect-infrastructure/deploy-agent-settings-transparently/deploy-agent-settings-to-windows-endpoints/windows-os-batch-script-examples/example-exclude-traffic-from-the-vpn-tunnel-on-windows-endpoints

Re: Force GlobalProtect client to only apply to 1 of 2 ethernet connections

KunalChopra — Mon, 11 May 2020 20:41:00 GMT

cheers and hope it gets resolved !