If you are using GlobalProtect in split tunnel mode to provide secure access to private apps only, you can add Prisma Access Explicit Proxy (Explicit Proxy) to your deployment to secure public apps, including internet and external SaaS applications.

In addition, if you are using a VPN client for access to data center and private applications, you can continue to use that client to secure access to private apps while you use Explicit Proxy and a PAC file to secure access to public apps. You can deploy Explicit Proxy in a location close to your mobile users, which eliminates the need to backhaul traffic to your data center for web security.