Force users using SSL VPN to access internet.

Forum|Forum|2 years ago
October 31, 2023
2 replies
1762 views

With our equipment and configuration:

- FortiGate 100E with UTM license

- SSL VPN with Azure SAML

- FortiClient VPN free.

I want to restrict internet access when users use their laptops outside the company network. If they want to access, they are required to use the VPN connection provided by the company.

Is there any way help me to do this?

Thanks.

FortiGate

pavankr5

Staff

Hello @ckon9 ,

Please check this article on Disabling 'Split-Tunnel' configuration

https://community.fortinet.com/t5/FortiGate/Technical-Tip-Disabling-Split-Tunnel-configuration/ta-p/198692#:~:text=Go%20to%20VPN%20%2D%3E%20SSL%20VPN,to%20WAN%20policy%20is%20needed.

This document explains once the split tunnel option is disabled, all user Internet traffic will reach FortiGate and VPN interface to WAN policy is needed hope this helps, please let us know if you have any queries.

Thanks,

Pavan

srajeswaran

Staff

Do you mean the users should not be using internet without the VPN?

Sign up

Login with SSO

Login to the community

Login with SSO