Skip to main content
ChrisTan
Staff
Staff
November 13, 2025

Technical Tip: 'Use endpoints' system DNS' is no longer available for FortiSASE new feature version

  • November 13, 2025
  • 0 replies
  • 281 views
Description This article describes that after the upgrade to the Feature version, 'Use endpoints' system DNS' is no longer supported.
Scope FortiSASE.
Solution

The new FortiSASE instance will support IPsec VPN instead of SSL VPN. Some SSL VPN features like 'Use endpoints' system DNS' will be removed.

 

Below is an example of an implicit DNS rule for a FortiSASE instance with SSL VPN:

 

2025-11-03_14h29_36.png

 

After migrating to IPsec VPN, this option will no longer be visible:

 

2025-11-03_14h41_32.png

 

The backend POP will act as the DNS server, and update the endpoint DNS with the tunnel IP address 100.81.0.1.

    Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
    Fortinet Flag the Hack. Wednesday, August 26, 9:00 AM - 5:00 PM ET, COSM, Atlanta, GA.