Hi, Yes, that's the point, so you are using domain exclusion. It means that if you go back to your gateway configuration, Video Traffic tab and deactivate the feature to bypass video, then it will continue to work (ie netflix doesn't go through the tunnel). What I would like is use Video Traffic feature so I don't need to add bunch of domains and IP addresses to the exclusion list.
... View more
Hello, Did somebody successfully implement this feature ? I'm working on GP 5.0.7 and PANOS 8.1, also we have a Global Protect Gateway license active. I want to exclude video traffic from the VPN tunnel. So I go to my external gateway, and enable exclude video traffic. The tunnel mode is enabled, and also in the agent config, the split tunneling is enabled (ie the option "no direct access to local network" is disabled). When I add application like dailymotion or netflix-streaming, I still can see such application going through the firewall. When I let the application panel empty, expectation is that ALL video streaming traffic is excluded from VPN. But that is not working either. So I'll be glad if someone encountered the same issue and resolved it 🙂 In parrallel, I'm using standard split tunneling via subnet IPs, and this is working well so far. But I want to make video traffic exclusion work.
... View more