How to properly include *.okta.com on split tunnel Globalprotect?

How to properly include *.okta.com on split tunnel Globalprotect?

1655
Created On 05/31/23 04:01 AM - Last Modified 05/09/25 19:37 PM


Objective


How to properly  include *.okta.com on split tunnel Globalprotect?



Environment


  • Palo Alto Firewalls
  • Supported PAN-OS 
  • GlobalProtect App
  • Domain based Split Tunneling


Procedure


To successfully include okta.com on split tunnel , Add the following domains under the split tunnel

*.okta.com
*.cloudfront.net
*.oktacdn.com

Screenshot 2023-05-30 at 8.58.48 PM.png



Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u000000kI0HCAU&lang=en_US&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail

Choose Language