About goran.katava

Hi, it should be working. You do need license for that.       ... View more

@MickBall    You can use '?' in order to see available commands. When in set config mode try next :   set global-protect global-protect-gateway GATEWAY-NAME remote-user-tunnel-configs ?   Thus for domain exclusion it is:   set global-protect global-protect-gateway GATEWAY-NAME remote-user-tunnel-configs CONFIG-NAME split-tunneling exclude-domains list DOMAIN-ENTRY ... View more

Yea, I am sure, IPSEC mode.    All sudden it started working. It was most probably blocked by ISP.   ... View more

Hi,   Here is what I use for O365 (optimized option):   set global-protect global-protect-gateway GATEWAY-NAME remote-user-tunnel-configs CONFIG-NAME split-tunneling exclude-access-route [ 13.107.18.10/31 13.107.6.152/31 13.107.64.0/18 13.107.128.0/22 13.107.136.0/22 23.103.160.0/20 40.96.0.0/13 40.104.0.0/15 40.108.128.0/17 52.96.0.0/14 52.104.0.0/14 52.112.0.0/14 104.146.128.0/17 131.253.33.215/32 132.245.0.0/16 150.171.32.0/22 150.171.40.0/22 191.234.140.0/22 204.79.197.215/32 ] ... View more

Hi Rajjair, Mickball,   I don't have Global Protect license, and therefor can't use split tunnel based on application/service.  As I mentioned in previous comment, version 9.0.x seems to support destination domain, even with no license.    We use MS Flow as described in next link, in order to get alerted on any changes of IP ranges or domains.   https://techcommunity.microsoft.com/t5/office-365-networking/use-microsoft-flow-to-receive-an-email-for-changes-to-office-365/m-p/240651         ... View more