Global Protect 8.1

Reply
L3 Networker

Global Protect 8.1

Hi,

 

Anyone know what proccess I can split tunnel to allow printing locally on GP 8.1?

 

Thanks

L5 Sessionator

Re: Global Protect 8.1

Hi @junior_r,

 

Do you have include access route subnets configured? If so, this should be more than enough provided that the printers IP does not conflict with the subnet within the include list.

 

If not, then you can try exluding the process of "Print Spooler", its full name is "spoolsv.exe" from split tunneling - although I have not tried this myself so there may be another process that handles printing over TCP/IP.


Check out the section "Configure a split tunnel to include or exclude public applications based on the application process name:" in the below documentation.

 

https://www.paloaltonetworks.com/documentation/81/pan-os/newfeaturesguide/globalprotect-features/spl...

 

or step12 from the GP 8.1 admin guide.

 

https://www.paloaltonetworks.com/documentation/81/globalprotect/globalprotect-admin-guide/globalprot...

 

Thanks,

Luke.

L7 Applicator

Re: Global Protect 8.1

@junior_r,

As @LukeBullimore pointed out access routes are likely what you are looking for here if you wish to configure a split-tunnel connection. The only way that this wouldn't work is if the client in question is connecting from the same IP space that you have specified for the split-tunnel (ie: Client is on a 192.168.1.0/24 network and your access routes include 192.168.1.0/24) 

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the Live Community as a whole!

The Live Community thanks you for your participation!