Configure GlobalProtect to disable direct access to the
local network.
To make sure that all mobile user traffic
is sent to Prisma Access, you can completely disable outgoing connections,
including local subnet traffic, from being sent to the local adapter.
You can deactivate all outgoing connections to the local adapter
by
making configuration changes
to the GlobalProtect gateway.
You can perform these
steps on Panorama or on an on-premises firewall that has been configured as
a GlobalProtect gateway.
Enable the No direct access to local network setting to
reduce risks in untrusted networks such as rogue Wi-Fi access points.