topic Re: Global Protect - Split Tunnel not Disabled in General Topics

Global Protect - Split Tunnel not Disabled

SebastB1 — Wed, 03 Jun 2020 11:48:51 GMT

I am having an issue with both windows and Mac clients.

I have enabled the no direct access to local subnets option but I am still able to browse to my local router and I am getting reports of users being able to access local printers.

currently the access include and exclude networks are blank.

The GP solution is on a VM in AWS on FW version 9.0.7

Windows GP client is 5.0.5 and the Mac client is both 5.0.8-4 and 5.1.3-12

any help would be much appreciated

Re: Global Protect - Split Tunnel not Disabled

SuryaR — Wed, 03 Jun 2020 14:34:13 GMT

Have same issue with MAC's running 10.15.x. We are using GP v5.1.3.
However, Windows work fine and do not have same issue.

Opened up a case with TAC and hoping for a update/fix soon..

Re: Global Protect - Split Tunnel not Disabled

recross — Wed, 03 Jun 2020 16:38:23 GMT

Do you have domain or application splits enabled?

Re: Global Protect - Split Tunnel not Disabled

OtakarKlier — Wed, 03 Jun 2020 20:53:53 GMT

Hello,

Check your access routes configuration.

Access routes are the subnets to which GlobalProtect clients are expected to connect. In most cases this is the LAN networks. To force all traffic to go through the firewall, even traffic intended for the Internet, the network that needs to be configured is "0.0.0.0/0," which means all traffic.

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClFbCAK

Regards,