GlobalProtect and using split tunneling

[JimMcGrady]

Global protect has the handy feature of excluding select destinations from being sent over the vpn. For example, setting

(Split Tunnel - Domain and Application - Exclude Client Application Process Name) https://docs.paloaltonetworks.com/globalprotect/4-1/globalprotect-app-new-features/new-features-rele...

Can this feature make use of Windows environment variables such as LOCALAPPDATA?  Some apps install in the user's path rather than in a user-independent path.

.

[Mick_Ball]

yes...

%LOCALAPPDATA%\Microsoft\Teams\current\Teams.exe

if this is placed in the exclude client application then Teams is not tunneled.

[Pavel_Jiracek]

I'm trying to exclude Teams from the GP tunnel, too. Is there a way to verify the traffic is not going via the tunnel? I still see some ms-teams traffic on the gateway.

Thanks

[Mick_Ball]

Download and run currports.   You can add teams.exe as a filter. Or you can see all applications and what way they are going.

it shows all sessions and the source ip.  So source ip vpn is tunnelled and source ip lan is direct.

HTH. 

[Pavel_Jiracek]

Thanks! Currports is a great tool.

[Jonathan.Bennett]

You can also use Microsoft's tool, https://connectivity.office.com/

They have you download an .exe, run it, then it tells you if various MS services are running over the tunnel or split

[MannyCosta]

I used this for Zoom also    %AppData%\Zoom\bin\Zoom.exe