Configure Split Tunneling for Privileged Remote Access Traffic (Panorama)
Focus
Focus
Prisma Access

Configure Split Tunneling for Privileged Remote Access Traffic (Panorama)

Table of Contents


Configure Split Tunneling for Privileged Remote Access Traffic (Panorama)

For managed devices, you can configure split tunneling for Privileged Remote Access traffic on Panorama to help improve PRA performance.
In use cases where your users access PRA from managed devices that have GlobalProtect installed, configure split tunneling for the PRA domain to help improve performance.
  1. In the Cloud Services plugin, select NetworkGlobalProtectGateways<GlobalProtect_External_Gateway>.
  2. Configure split tunnel settings for PRA based on the destination domain. These settings are assigned to the virtual network adapter on the endpoint when the tunnel is established with the gateway.
    1. In the GlobalProtect Gateway Configuration dialog, select AgentClient SettingsDefault.
    2. In the Configs dialog, select Split TunnelDomain and ApplicationExclude Domain.
    3. Add the PRA domain that you want to exclude from the tunnel using the destination domain. This can be the default PRA domain (*.panwpra.com) or your custom PRA domain.
    4. Click OK to save the split tunnel settings and Commit your changes.