Exclude Zoom from GlobalProtect

[securehops]

Hello,

I'm working on excluding Zoom from GlobalProtect.  I came across this article

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000PPDSCA4&lang=en_US%E2%80%A...

For windows, there is an error, instead of excluding %AppData%\Roaming\Zoom, you just need to use %AppData%\Zoom, as %AppData% already takes you into the roaming folder.   With this correction, I'm not seeing any issues on Windows OS

For macOS, I'm not having any success.  If I exclude path /Applications/zoom.us.app/Contents/MacOS/zoom.us , the users cannot even join a meeting.  They get an "unable to connect" message.   I tried removing ".app" from the path.  This allows them to connect but I see zoom-meeting (443/8801) traffic going through the firewalls.

I should not this is all without excluding any of the domain names

Has anyone been able to get this to work on macOS?

[LAYER_8]

Perhaps something to try, if you go to your GlobalProtect Gateway settings, exclude video traffic without needing to specify application path?

[securehops]

@LAYER_8 thanks for the response.   I was able to get it working.  The issue I was having was due to a sophos limitation.  Seems to be fixed in their latest version

[${userLoginName}]

@securehops Did you remove the application exclusions completely and still have it work? I have noticed my MacOS users are having some issues with the failure to connect until they connect to the VPN for the first time.