topic Is windows VPN client and split tunnel supported? in General Topics

Is windows VPN client and split tunnel supported?

Carracido — Wed, 22 Jul 2020 16:16:02 GMT

Dear community,

I configured Windows 10 vpn client to connect to the globalprotect gateway and it works fine, the only thing that it´s not working is split tunneling.

Cannot see the Access Route For Third Party Client on the gateway like this example:

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClIDCA0

Then checking the documentation it seems like the Windows VPN client is not supported:

https://docs.paloaltonetworks.com/compatibility-matrix/globalprotect/what-x-auth-ipsec-clients-are-supported

This could explain some of the features not working fine.

Could someone confirm if globalprotect with windows vpn client and split tunnel should work?

Thank you in advance!

Re: Is windows VPN client and split tunnel supported?

BPry — Wed, 22 Jul 2020 19:43:54 GMT

@Carracido,

Split tunnel isn't an option unless it's supported through the client you are using paired with x-auth. Likewise the option that you are talking about depends on the IPSec setup sent by the client connecting to the firewall, not the firewall itself.

Re: Is windows VPN client and split tunnel supported?

fhewiufhwefhwe — Thu, 23 Jul 2020 21:39:23 GMT

I am using split-tunnel and GlobalProtect app with Windows 10, Android, and IOS. I have Enable IPSec checked. I do not have Enable X-Auth Support checked.

Re: Is windows VPN client and split tunnel supported?

OtakarKlier — Thu, 23 Jul 2020 21:34:36 GMT

Hello,

As @BPry mentioned, its not possible since the client does not support it. I would suggest to use the GlobalProtect client. Also there is a reason most companies are going away from split tunnel, you lose visibility into what your clients are trying to access and you cannot protect them as well.

Regards,