Global Protect 3.1.1 PAN-OS 7.1.5 split tunneling issue

[TranceforLife]

Another one,

Split Tunneling simply doesn't work:

When trying to access resources on the Internet (google.com) all traffic is routed to the tunnel where no policy for the Internet access, hence no internet.

[fjwcash · Accepted solution]

What's your client OS?

Android doesn't support split-tunnelling.

iOS sometimes supports split-tunnelling, but requires some manual twiddling of networking options on the device.

Windows works great with split-tunneling, although we've only tested 7 Pro.

Supposedly MacOS X supports split-tunneling, but we haven't tested it.

IOW, if you're not using Windows on the client, split-tunneling won't work.  It's a routing issue on the client, not a GlobalProtect issue.

Cheers,

Freddie

[TranceforLife]

@fjwcash thanks for your feedback

Got some updates but was busy and was not able to post here:

The issue is only on the mobile devices and the native Linux VPNC. Windows clients are working fine (initially was some misconfiguration). l have found a quite nice article (FYI) . See below:

https://live.paloaltonetworks.com/t5/Configuration-Articles/Split-Tunneling-for-VPNC-Client-on-Linux...

So as you have already mentioned manual static routing is required in order for split tunnelling to work on non-native  VPN clients.

"Good" to know that split-tunneling is not supported on the Android.

Thanks,

Myky