Technical Tip: How to enable ipconfig /flushdns at SSL VPN connection when Split DNS is being used

In certain scenarios, the SSL VPN split DNS feature may not work correctly, requiring the user to manually run the ipconfig /flushdns command to solve the problem.

To correct this issue, the <traffic_keep_strategy> tag must be set to 1 in the XML settings on the VPN.

Follow the steps below to make this change:

1. Access the EMS.
2. Navigate to 'Endpoint Profiles' -> 'Remote Access'.
3. Edit the VPN profile used in the environment.
4. In the upper right corner, select XML.
5. In the new screen, select Edit (next to the Save button).
6. Locate the <connections> tag.
7. Within this section, identify the <name> tag corresponding to the VPN to be modified.
8. Insert the <traffic_keep_strategy>1</traffic_keep_strategy> inside the <name> tag.

The resulting snippet will be similar to the example below:

[...]
<connections>

<connection>

<name>VPN Name</name>

<uid>02027951-4130-47E9-BBA1-EB05BCDDE76</uid>

<machine>0</machine>
<traffic_keep_strategy>1</traffic_keep_strategy>

[...]