Which version of GlobalProtect supports split tunneling based on destination domain, client process, and HTTP/HTTPS video streaming application?

The correct answer is B. GlobalProtect version 4.1 with PAN-OS 8.1. GlobalProtect version 4.1, paired with PAN-OS 8.1, introduced enhanced split tunneling capabilities. Specifically, GP 4.1 with PAN-OS 8.1 added support for split tunneling exclusions based on: destination domain name, client application/process name, and HTTP/HTTPS video…

Submitted by mateo_ar· Apr 18, 2026Deploy and Configure

Question

Options

AGlobalProtect version 4.0 with PAN-OS 8.1
BGlobalProtect version 4.1 with PAN-OS 8.1
CGlobalProtect version 4.1 with PAN-OS 8.0
DGlobalProtect version 4.0 with PAN-OS 8.0

How the community answered

(24 responses)

B
92% (22)
C
4% (1)
D
4% (1)

Explanation

GlobalProtect version 4.1, paired with PAN-OS 8.1, introduced enhanced split tunneling capabilities. Specifically, GP 4.1 with PAN-OS 8.1 added support for split tunneling exclusions based on: destination domain name, client application/process name, and HTTP/HTTPS video streaming traffic. Earlier versions (4.0 with PAN-OS 8.0 or 8.1) only supported basic IP subnet-based split tunneling. The combination of GP 4.1 + PAN-OS 8.1 is required because both the client agent and the gateway/portal must support these granular split tunnel criteria together.

Topics

#GlobalProtect#Split Tunneling#PAN-OS Versions#Feature Availability

Community Discussion

No community discussion yet for this question.

Full PCNSE Practice