Split Tunnel Domain & Application Cisco Umbrella Issue

[jeff6strings]

We have one GlobalProtect Portal and 3 Gateways. This one Gateway is version 9.0.9-h1, and the GlobalProtect client version is 5.2.3-22. For testing, on this one Gateway, I enabled Split tunnel Domain and Application for *.webex.com and *.zoom.us.

I'm testing from home with two laptops, and both are connected to this same GP Gateway. Laptop 1 does not have all our client-side security software, and I see the traffic for both these domains going out the local network interface/Internet. Laptop 2, which has all our client-side security software, I see traffic for both domains going down the VPN.

I think the problem with laptop 2 may be Cisco Umbrella? Has anyone seen this issue with security software?
Thanks for any help.

Jeff

[jeff6strings]

We confirmed the domain exclusion is a Cisco Umbrella issue but still like to know if anyone else has had this issue and, if so, what was your resolution?

Thank you.

Jeff

[Nisha_Bharadia]

Any update on this with cisco umbrella?

[sebastianvd]

split domain had some issues on various versions. 

A hotfix for 5.2.5 has been released with a lot of fixes btw: Addressed Issues in GlobalProtect App 5.2 (paloaltonetworks.com)

[jeff6strings]

Thank you as we upgraded but still not working. I read the Addressed Issues and it's impressive how many could have been the issue.

[AmolMohite]

we have also same issue... We have configured split tunnel domain for  *.example.com.. Its not working when Cisco Umbrella agent is active...once we have disabled the agent it is working as expected...there is one option on umbrella to offload URL domain, that will fallback the request to internal GP client DNS instead going towards opendns.