Skip to main content
Mrinmoy
Staff
Staff
September 25, 2024

Technical Tip: Convert SSL VPN Split tunnel to Full tunnel

  • September 25, 2024
  • 0 replies
  • 885 views
Description This article explains how to convert an SSL VPN from split tunnel mode to Full tunnel mode.
Scope FortiGate v6.4 or later.
Solution
  1. Identify the portal which is under VPN ->SSL-VPN Settings

 

1. SSL VPn settings.JPG

 

  1. Modify the portal from 'Enabled Based on Policy Destination' to 'Disabled'. 

 

3. Portal settings.JPG

 

  1. For split tunnel, there is already a firewall policy configured to allow the traffic from the 'SSL VPN client' to the 'Internal/ LAN' Network.

 

5. SSL to Internal.JPG

 

  1. A full tunnel is also responsible for allowing the traffic from the 'SSL VPN client' to the 'Public' Network. Another policy is necessary to allow that traffic.

 

4. SSL to WAN.JPG

 

Verification:

In the case of a split tunnel, only one route (internal network) will be installed in the remote computer.

 

7. Route-table-Split-tunnel.JPG

 

The full tunnel will install a default route in a remote computer with a lower matric.

 

6. Route-table-Full-tunnel.JPG

    Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
    Virtual event | September 2026. SASE summit. The age of autonomous trust. Register here!