Global Protect Policy enforcement

[FWPalolearner]

Hi All ,

I have an issue

Is there a way to use Global Protect to  enforce web or URL  filtering policies when users are not on the corporate LAN ?  for now, when users work remotely , they bypass all web and  URL filtering and security policies and download whatever threats they want. 

Regards

[Mick_Ball]

 Not sure what you mean, do they not connect back into the corp network via GP when working remotely.

[FWPalolearner]

Yes they connect to GW

But as we are using Split tunneling which allows them to use Local Internet for non corp traffic

We still want to enforce URL access restrictions so that they only access legitimate URLS . but we dont want to disable split tunneling

So is there a way

[Mick_Ball]

no this s is not possible.

you should perhaps review your split tunnel policies and decide what is acceptable.

we only allow office365 and other trusted services via split tunnel.

check on your firewall for the heavy usage sites and then decide if they can be  excluded from the tunnel....