topic Re: Enable split tunnel for Zoom in General Topics

Enable split tunnel for Zoom

Yusuf_PA — Sun, 19 Jul 2020 09:40:44 GMT

We are planning to exclude all zoom traffic from Global protect VPN and currently we are using 4.1.5 GP agent version.

I have gone through the zoom documentation and created EDL but not getting option to exclude the EDL (external dynamic list ) in split tunnel >access route >Exclude , Kindly suggest to enable split tunnel for Zoom traffic.

https://support.zoom.us/hc/en-us/articles/201362683-Network-firewall-or-proxy-server-settings-for-Zoom.

EDL

Zoom	https://assets.zoom.us/docs/ipranges/Zoom.txt
Zoom meetings	https://assets.zoom.us/docs/ipranges/ZoomMeetings.txt
Zoom Cloud Room Connector	https://assets.zoom.us/docs/ipranges/ZoomCRC.txt
Zoom Phone	https://assets.zoom.us/docs/ipranges/ZoomPhone.txt

Re: Enable split tunnel for Zoom

Remo — Sun, 19 Jul 2020 22:17:39 GMT

Hi @Yusuf_PA

First I wantdd to mention that globalprotect 4.1 already reached it' end of life date quite a while ago (Jabuary 2019): https://www.paloaltonetworks.com/services/support/end-of-life-announcements/end-of-life-summary

You should consider an update to 5.1.

Not back to your question. Excluding networks in globalprotect is not possible with an EDL. You need to manually add the networks/IPs one by one or you could build an automation that fetches the IPs from the zoom URLs and configures them via API. If you need a better way to solve your problem, you should take a look into the options you have with a globalprotect subscription:

Include/exclude traffic based on DNS domains
Include/exclude traffic based on client application

https://docs.paloaltonetworks.com/pan-os/8-1/pan-os-web-interface-help/globalprotect/network-globalprotect-gateways/globalprotect-gateways-agent-tab/client-settings-tab.html#ida914c989-1cb3-4288-bd66-a1948a185ebc

Re: Enable split tunnel for Zoom

Stribnet — Thu, 12 Aug 2021 03:46:36 GMT

The question that I was looking for, but not the answer I desired to see. PAN should consider adding this feature, as both domain and app path based split tunnel is not working ideally for the Zoom app.

Re: Enable split tunnel for Zoom

Remo — Thu, 12 Aug 2021 05:21:23 GMT

@Stribnet you could ask your SE about that to have a feature request created. Maybe there is already one, so you could add your vote to it.

... or as this is not working properly, you could create a TAC case to hopefully find the reason why the existing features aren't working with zoom.