What is a result of enabling split tunneling in the GlobalProtect portal configuration with the "Both Network Traffic and DNS" option?

Question

Options

• AIt specifies when the secondary DNS server is used for resolution to allow access to specific
• BIt allows users to access internal resources when connected locally and external resources when
• Clt allows devices on a local network to access blocked websites by changing which DNS server
• DIt specifies which domains are resolved by the VPN-assigned DNS servers and which domains

• A
  3% (1)
• C
  6% (2)
• D
  91% (32)

Explanation

Standard split tunneling controls only network traffic routing - it determines which destination IP subnets are sent through the VPN tunnel versus sent directly to the internet. However, DNS split tunneling is a separate challenge: even if corporate subnets are routed through the VPN, DNS queries for internal hostnames might go to the ISP's DNS server and fail. The 'Both Network Traffic and DNS' split tunneling option in GlobalProtect addresses both problems simultaneously. It routes specified traffic subnets through the VPN AND configures DNS so that internal domain names (e.g., corp.example.com) are resolved by the VPN-assigned internal DNS servers, while external domains (e.g., google.com) are resolved by the client's local/ISP DNS servers. This enables split-horizon DNS resolution, ensuring internal resources are reachable by name and external browsing remains efficient. Options A, B, and C describe behaviors that either mischaracterize the feature or describe unrelated functionality.

No community discussion yet for this question.