More questions on GlobalProtect (PAN 5.0.4, GP 1.2.2): 1) I have GlobalProtect currently set up with access routes to two internal subnets. My understanding is that this "Access Route" section is split tunneling, where only traffic destined for those subnets will go through the VPN, and anything else should just use my existing Internet connection, However, when I connect to the Portal/Gateway through the Windows agent, it appears to take about 10 seconds just to "Connect". Further, when I then try to browse the web, The title on the window will say "Waiting for <website>" also for about 10-15 seconds before actually pulling up the site. If I disconnect from GP, and go back to the website, it appears instantaneously. Is there something else I need to configure to immediately allow the normal Internet traffic to flow without a wait? 2) Does URL filtering apply to GlobalProtect clients? I'm guessing if so, that it falls in line with not configuring split tunneling and making sure all traffic goes through the VPN...but if I'm experiencing this performance issue with split tunneling, I'm afraid to know what it looks like with all traffic going through the GP VPN. I tried applying URL Filtering to the GP Zone, but with split tunneling defined, it didn't filter me.
... View more