Split Tunnel Routing Config Help

[Dan_Swartz]

Looking for some help on split tunneling.

We are on PAN os 9.1.9 GP client 5.26, for our LAN we also use Cisco Umbrella to block sites.

What I want to do is when GlobalProtect connects I want all LAN traffic going through the VPN traffic, and all Internet traffic from the client going through their end, not the VPN

When I try and configure split tunneling on my gateway I follow the steps in the Split Tunneling doc, I include all my local LAN subnets in X.X.X.X/24 notation. In the Exclude I put 0.0.0.0/0

However when I connect and test with a known blocked site, I still get a blocked message. Looks like internet requests are still going through the GP client and our local LAN internet connection.

I am not sure what I am doing wrong here. Any one have any ideas?

Thank you in advance.

[JoergSchuetter]

Hello @Dan_Swartz 

Did you check the routes on the client (using "route print")?

[Gareth.Doyle]

Did you enable access to the Local Network?

[Dan_Swartz]

Yes I did and all the include routes are listed, as far as the 0.0.0.0/0 route that points at the local adapter. also if I do a trace route it goes out the local adapter and does not get passed through the VPN. I did a trace both connected and disconnected from the VPN

[Dan_Swartz]

You mean beyond the LAN subnets in the include area of split tunneling?