Global Protect - Split Tunnel

[markk96]

Is it possible with global protect and split tunnel setup to have policies applied for url filtering to the local client so that sites can be blocked in split tunnel mode?

[bat]

Hi markk96

You just need to apply URL filtering to the policy with from-zone as the zone to which the required tunnel interface (SPLIT/FULL) is bound.

Let me know if you have any queries.

Thanks

[markk96]

I am not sure, I have a policy setup from my GP_Zone with any and any to L3-Inside and L3-Outside with the URL policy applied.  If I do not use split tunnel it work, if I remove 0.0.0.0/0 from the client portal config it split tunnels and the policy is not picked up. 

[HULK]

This doc might give you some insight:

Using Global Protect with One gateway and both split - full tunnel

Re: GlobalProtect Local LAN Printing

Thanks

[bat]

markk96

I could not get you, when you remove the 0.0.0.0/0 is the client still able to access the Internet through GP (and PAN firewall) after you remove it ?

Thanks