Third party software ExpressConnect Drivers & Services running on the Dell laptops interfere with GlobalProtect Split tunnel
4964
Created On 09/27/22 16:10 PM - Last Modified 01/17/25 21:15 PM
Symptom
- Unable to access the website/application which is configured under the exclude domain and application process name.
- Domain base split tunnel traffic leaking from the GP adapter and going through the local adapter.
Environment
- GlobalProtect (GP) Gateway
- PAN-OS 9.1 and above
- Split tunnel
Cause
- The software ExpressConnect Drivers & Services could change the TCP connection source IP binding after the connection has been established.
- This behavior causes problem with GlobalProtect split tunnel
Resolution
Disable 3rd party software ExpressConnect Drivers & Services running on the endpoint.
Additional Information
- ExpressConnect is the Network feature in Dell Optimizer. As its name indicates is a dynamic bandwidth management software
- Check the Processinfo logs in the GP client logs and check if the below services are running
- ExpressConnect Dynamic Bandwidth Management
- ExpressConnect Analytics Service
- ExpressConnect Network Service
- ExpressConnect Selector Service