Split tunneling issue for office 365 applications

Jatin.Singh — Mon, 09 Nov 2020 06:19:00 GMT

Recently enabled split tunneling for our Global protect VPN, and have added some domains into the split tunnel.

For some users domain split tunneling doesn't work.

The domains configured to be included in the split tunnel are as follows

*autologon.microsoftazuread-sso.com

*enterpriseregistration.windows.net

*.microsoftonline.com

We are trying to add these domains to include domain list- however, when Global protect is connected, effected users are unable to connect to these services at all.

Without the split tunnel the functionality was immediately restored for affected users

Now we came across this document which says that Microsoft recommends to use IP addresses instead of FQDN for office 365 applications when configuring split tunneling

https://live.paloaltonetworks.com/t5/general-articles/globalprotect-optimizing-office-365-traffic/ta-p/319669

However this document explain excluding routes scenario.

So my question is will this method work for include routes too?

Re: Split tunneling issue for office 365 applications

Mick_Ball — Mon, 09 Nov 2020 17:15:21 GMT

what version of GP are you using, there was a bug in earlier versions of 4 with domain split tunnel.

we use IP's instead of domains, works well for both teams and outlook..

topic Split tunneling issue for office 365 applications in General Topics

Split tunneling issue for office 365 applications

Re: Split tunneling issue for office 365 applications