Lync Client and GlobalProtect Split tunneling issue

[plevesque]

Hi,

Mircosoft recommands to enable splitunnling for lync. 

https://blogs.technet.microsoft.com/nexthop/2011/11/14/enabling-lync-media-to-bypass-a-vpn-tunnel/

To still continue to have the internet over the VPN, how can Globalprotect client only allow specific public ip address to bypass the tunnel?

Thank you

Kind regards,

Pierrick

[reaper]

Hi Pierrick

GP can be made to split-tunnel by changing the 'access route' in 'network settings' of the gateway's agent settings

leaving this field blank will inject a 0.0.0.0/0 route into the client and will make all traffic go through the tunnel. If subnets are added, only those subnets will be routed onto the tunnel and everything else will go directly out onto the internet.

unfortunately the reverse can only be achived by adding supernets that exclude only the networks you don't want.

If you have a proxy server you could add a .pac or .wpad file to your global policy that excludes the networks locally on the client while still forwarding everything else through the tunnel

[plevesque]

Hi Reaper, 

Thank you for your valuable feedback, 

We do not have any proxy and this is one of the reason why we are using palo alto as well.

In regards to supernet i do not know how this can be achieved, since i only need one or two ips to go over the internet.

Thank you again for your time on this case.

Kind regards,

Pierrick.