global protect clientless NAT

[sebastianvd]

We are configuring global protect.

The scenario is we use one armed global protect, because we have it connected behind our ASA firewall with functions as boundary.

As we have several scenario's we want to use the client and clientless version.

For the client version we can assign an IP from some defined range, that works allright.

Now for the clientless vpn i ran into the issue that a connection made from a client to a clientless app has the public source ip adres. In our scenario we run into assymetric routing. 

Now my question is:  Can globalprotect clientless vpn be source natted ? So requests are routed back to the palo alto instead of going directly through asa to the internet ?

thanks !