Global Secure Access is tunneling traffic when on same network as destination

Question

Global Secure Access is tunneling traffic when on same network as destination

Lloyd Ferdinand 0

Hi, in our Global Secure Access setup our local traffic (e.g. Sage ) traffic is routed over Secure Global Access even when we are on the same LAN as the destination server where the data is located.

In this case GSA causes significantly less performance as traffic is routed over the internet instead of directly going over the LAN and Sage is extremely unresponsive.

I read that when GSA was in general availability this would be resolved but it doesn’t appear to be, and I cannot find documentation on it.

I was advised that if I used the FQDN instead of IP this would resolve the issue, however it seems to be the same regardless.

Akhilesh Vallamkonda 15,340 Reputation points Moderator

2025-03-25T21:10:58.3866667+00:00

Hi @Lloyd Ferdinand
Could you please try using Internet Access traffic forwarding profile policies with the Custom Bypass, It exclude traffic such as your VPN endpoints, private IP ranges, and squat IP ranges, and endpoints that leverage a network Access Control List (ACL).

For more information, please refer Internet Access traffic forwarding profile policies
Lloyd Ferdinand 0 Reputation points

2025-03-26T09:38:29.75+00:00

Hi @Akhilesh Vallamkonda thanks for the reply however that means purchasing the Internet access profile add on as well, is there really no way of doing this with just the private access licence? Seems a little pointless to have a VPN replacement product that is useless when in the office.
Akhilesh Vallamkonda 15,340 Reputation points Moderator

2025-03-27T19:37:09.38+00:00

@Lloyd Ferdinand
If I understand correctly you want to avoid the traffic from Global Secure Access to LAN network when source and destination are on the same network. If this is not the case, please explain what you are trying to achieve.
Akhilesh Vallamkonda 15,340 Reputation points Moderator

2025-03-31T08:39:47.83+00:00

@Lloyd Ferdinand
We haven’t heard from you on the last response and was just checking back to see if you have a resolution yet. In case if you have any resolution please do share that same with the community as it can be helpful to others. Otherwise, will respond with more details and we will try to help.
Akhilesh Vallamkonda 15,340 Reputation points Moderator

2025-03-31T08:56:03.7633333+00:00

@Lloyd Ferdinand
We haven’t heard from you on the last response please respond with more details and we will try to help.
Lloyd Ferdinand 0 Reputation points

2025-03-31T09:57:10.01+00:00

@Akhilesh Vallamkonda Sorry I have been off work on annual leave.

Thats, correct I want to avoid the traffic from Global Secure Access to LAN network when source and destination are on the same network. For example, if I am browsing a SMB share on a "file server" and I am on the same LAN it will bypass the Global Secure Access and go directly to the server via a local connection.

As previously mentioned, this is mainly because of the lag caused when using Sage via the Global Secure Access client and it having to go out over the internet even if the server and the client PC are on the same physical LAN.

Thanks
Whattler, Lee 0 Reputation points

2025-09-17T15:39:48.1466667+00:00

Interested if above question has any solution as well