Enable split tunnel for Zoom

[Yusuf_PA]

Hi

We are planning to exclude all zoom traffic from Global protect VPN and currently we are using 4.1.5 GP agent version.

I have gone through the zoom documentation and created EDL but not getting option to exclude the EDL (external dynamic list ) in split tunnel >access route >Exclude  , Kindly suggest to enable split tunnel for Zoom traffic.

https://support.zoom.us/hc/en-us/articles/201362683-Network-firewall-or-proxy-server-settings-for-Zo....

EDL

Zoom	https://assets.zoom.us/docs/ipranges/Zoom.txt
Zoom meetings	https://assets.zoom.us/docs/ipranges/ZoomMeetings.txt
Zoom Cloud Room Connector	https://assets.zoom.us/docs/ipranges/ZoomCRC.txt
Zoom Phone	https://assets.zoom.us/docs/ipranges/ZoomPhone.txt

[vsys_remo]

Hi @Yusuf_PA 

First I wantdd to mention that globalprotect 4.1 already reached it' end of life date quite a while ago (Jabuary 2019): https://www.paloaltonetworks.com/services/support/end-of-life-announcements/end-of-life-summary

You should consider an update to 5.1.

Not back to your question. Excluding networks in globalprotect is not possible with an EDL. You need to manually add the networks/IPs one by one or you could build an automation that fetches the IPs from the zoom URLs and configures them via API. If you need a better way to solve your problem, you should take a look into the options you have with a globalprotect subscription:

• Include/exclude traffic based on DNS domains
• Include/exclude traffic based on client application

https://docs.paloaltonetworks.com/pan-os/8-1/pan-os-web-interface-help/globalprotect/network-globalp...

[Stribnet]

The question that I was looking for, but not the answer I desired to see. PAN should consider adding this feature, as both domain and app path based split tunnel is not working ideally for the Zoom app.

[vsys_remo]

@Stribnet you could ask your SE about that to have a feature request created. Maybe there is already one, so you could add your vote to it.

... or as this is not working properly, you could create a TAC case to hopefully find the reason why the existing features aren't working with zoom.