Global protect has the handy feature of excluding select destinations from being sent over the vpn. For example, setting
(Split Tunnel - Domain and Application - Exclude Client Application Process Name) https://docs.paloaltonetworks.com/globalprotect/4-1/globalprotect-app-new-features/new-features-rele...
Can this feature make use of Windows environment variables such as LOCALAPPDATA? Some apps install in the user's path rather than in a user-independent path.