About rajjair

Thank you for correcting this article in regards to the log files and providing the details very helpful.   However, we seem to be running into an issue with this feature I am just wondering if this has been tested with a recent version of clients and if you guys have a link to try this feature out to confirm this is working as expected to not. In our environment we can see in the pangps.log we can see the video redirect being logged and the session on the firewall also shows the tracker stage of the split-tunnel occurring. However, the video errors out on the browser and the user are not able to play the content, based on the article there is 302 redirect but I don't see that occurring for us on the web trace, this video link is embedded on the site so wondering if this feature works with embedded videos or not.. Any information would help.. I have opened a ticket with support also on this     I also tried to copy the URL and what I noticed on the first try was it fails on the second try it works after I refresh the browser.. but there is no 302 redirect as mentioned in the article above. below is a complete web trace when I have copied the original URL of the video and tried to play it.   Thanks for any info anybody can share... Raj   ... View more

You need to ensure the portal and gateway URLs are added to your trusted/Intranet sites in IE and ensure this setting is enabled.     For Edge and Chrome you need to configure "AutoSelectCertificateForUrls" to avoid the pop-up   Microsoft Edge Browser Policy Documentation | Microsoft Docs   ... View more

Not sure if you are aware but to use DNS based split tunnelling you have to have a gateway subscription on your firewall also   About GlobalProtect Licenses (paloaltonetworks.com) ... View more

In the GlobalProtect Log bundle, we don't have gpsplit.log -- just wondering where specifically is this file "Within the GlobalProtect logs bundle, also review gpsplit.log (the equivalent file on the macOS is PanNExt.log) " ... View more

Talking to palo support they say this expected behaviour post-vpn-connect is not support in pre-logon states ... View more