09-05-2014 04:53 PM
Is it possible with global protect and split tunnel setup to have policies applied for url filtering to the local client so that sites can be blocked in split tunnel mode?
09-05-2014 04:56 PM
You just need to apply URL filtering to the policy with from-zone as the zone to which the required tunnel interface (SPLIT/FULL) is bound.
Let me know if you have any queries.
09-05-2014 05:14 PM
I am not sure, I have a policy setup from my GP_Zone with any and any to L3-Inside and L3-Outside with the URL policy applied. If I do not use split tunnel it work, if I remove 0.0.0.0/0 from the client portal config it split tunnels and the policy is not picked up.
09-05-2014 05:22 PM
This doc might give you some insight:
Using Global Protect with One gateway and both split - full tunnel
Re: GlobalProtect Local LAN Printing
09-05-2014 05:28 PM
I could not get you, when you remove the 0.0.0.0/0 is the client still able to access the Internet through GP (and PAN firewall) after you remove it ?
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!