Which version of GlobalProtect supports split tunneling based on destination domain, client process, and HTTP/HTTPS video streaming application?

Which feature can provide NGFWs with User-ID mapping information?

If an administrator wants to apply QoS to traffic based on source, what must be specified in a QoS policy rule?

What is the best description of the HA4 Keep-Alive Threshold (ms)?

SSL Forward Proxy decryption is configured, but the firewall uses Untrusted-CA to sign the website https://www.important-website.com certificate. End-users are receiving the "security certificate is not trusted" warning. Without SSL decryption, the web browser shows that the website certificate is trusted and signed by a well-known certificate chain Well-Known- Intermediate and Well-Known-Root-CA. The network security administrator who represents the customer requires the following two behaviors when SSL Forward Proxy is enabled:
- End-users must not get the warning for the https://www.very-
important-website.com/website
- End-users should get the warning for any other untrusted website
Which approach meets the two customer requirements?