MacOS WSS Agent process path to bypass VPN

Products

• Cloud Secure Web Gateway - Cloud SWG

Issue/Introduction

Corporate users are using WSS Agent when they connect to our corporate VPN (GlobalProtect)

Already configured WSS Agent installation path in GlobalProtect Split tunnel (application based) for Windows users so that WSS tunnel does not go through our corporate VPN but goes directly from user's machine to WSS Pod via local ISP. This all works very well.

Want to extend the service to MacOs users but documentation does not seem to point to the WSS Agent process path in MacOS which we need to add into GlobalProtect Split-tunnel configuration.

 

Environment

WSS Agent on MacOS

Palo Alto GlobalProtect VPN client - Configure a Split Tunnel Based on the Domain and Application (paloaltonetworks.com)

 

Resolution

Add the following paths to the Global Protect VPN Application bypass configuration for all MacOS WSS Agent processes to go direct:

-  /Applications/Symantec WSS Agent.app/Contents/MacOS/wssad

-  /Library/Application Support/Symantec WSS Agent

-  /opt/symantec/wssa/wssad|/Library/Application Support/Symantec WSS Agent