GlobalProtect — Customize Tunnel Settings
Customize the settings for the VPN tunnel the GlobalProtect
app establishes to connect to Prisma Access.
Customize the settings for the VPN tunnel
the GlobalProtect app establishes to connect to Prisma Access.
Tunnel
settings include split tunneling options that you can use to define
what traffic the app sends to Prisma Access and what can be routed
locally instead (like bandwidth intensive applications that aren’t
required for business use).
The
Match Criteria
you
define for tunnel settings tells Prisma Access the users, devices,
or systems that should receive the settings. For example, you could
specify that a tunnel settings rule applies to all instances of
the GlobalProtect app in a certain region.You can explore
all GlobalProtect tunnel settings on the
GlobalProtect
App
page, and here are examples of some of the options
available to you.Custom Tunnel Settings | |
|---|---|
Explore and customize tunnel settings here —> |  |
Authentication Override | Enable Prisma Access to generate and accept
secure, encrypted cookies for user authentication. Turning this
on allows the user to provide login credentials only once during
the specified period of time. 
|
Split Tunneling | Split tunneling conserves bandwidth by excluding
traffic Prisma Access that is not business critical or does not
enable productivity. Here you can define what traffic the GlobalProtect
app allows or disallows through the VPN tunnel to Prisma Access.
|
Exclude Video Stream Traffic | Choose not to send video streaming traffic
from the listed applications to Prisma Access. Right now, this setting
is applied globally: video streaming exclusions are applied to all
traffic the GlobalProtect app sends to Prisma Access, not just the
match criteria you've defined for this rule. |
