Skip to main content
Anatoli
Anatoli
Explorer III
May 27, 2024
Question

Able to access bookmark trought vpn but not ssl vpn

  • May 27, 2024
  • 8 replies
  • 3038 views

How am I able to access switches and https (faz..) through bookmark and i cannot access through vpn ssl I checked the policy and it's fine, but could be a proxy for whatever in the middle?

8 replies

hbac
Staff
hbac
Staff
May 27, 2024

Hi @Anatoli,

 

Please refer to this article to collect debug flow: https://community.fortinet.com/t5/FortiGate/Troubleshooting-Tip-First-steps-to-troubleshoot-connectivity/ta-p/192560

 

Regards, 

    Brunn3r
    Brunn3r
    Explorer II
    May 27, 2024

    Do you access your bookmarks via FQDN?
    Is there a DNS Suffix missing in the VPN Setting?

      Anatoli
      AnatoliAuthor
      Explorer III
      May 27, 2024

      Hi  @Brunn3r yes it is trought fqdn 

       

      Is there a DNS Suffix missing in the VPN Setting?

      I dont know how set up this part o check this par . Can you help me ?

        Brunn3r
        Brunn3r
        Explorer II
        May 27, 2024

        Of course, you can add a DNS-Suffix to the SSL VPN Configuration as following:

        config vpn ssl setting    set dns-suffix "intra.example.com" end
          Anatoli
          AnatoliAuthor
          Explorer III
          May 27, 2024

          I put up divided DNS on full access, with the same outcome

           

           

          FW_DNS1.png

          FW_DNS2.png

           

          For other hand i am seeing i dont get  bytes recived 

           

           

          not byte.png

          Brunn3r
          Brunn3r
          Explorer II
          May 27, 2024

          Seems like there is no firewall policy.

          in the source you need to specify the user/group as well

            Anatoli
            AnatoliAuthor
            Explorer III
            May 27, 2024

            Hi  @Brunn3r   thanks for your reply ,  yes there is the user on the policy 

            ssl_vpn.png

              Anatoli
              AnatoliAuthor
              Explorer III
              May 28, 2024

              it is necesary to add it  this user to a group ? 

              Anatoli
              AnatoliAuthor
              Explorer III
              May 29, 2024

              Any help  the issue is the same 

              Brunn3r
              Brunn3r
              Explorer II
              October 3, 2024

              @Anatoli you have Routing Address Overrides configured, this does not accumulate with the setting regarding policy based split tunneling. Further you have configured DNS Split with a .local address. Google will never be able to resolve this. so the 8.8.8.8 there makes no sense.

              At last, I once got problems with DNS Split Tunneling. It was because the ISP where i opened the VPN Tunnel was using IPv6. Try to disable IPv6 on Client side (if not needed) and reconnect the VPN again.

               

              Terms & ConditionsAccessibility statement