Forticlient ZTNA Adding default route on split remote tunnel

Forum|Forum|1 year ago
March 11, 2025
4 replies
1880 views

Hi All,

I am facing an issue with my IPsec remote VPN split tunnel configuration on FortiGate. When a user connects using FortiClient-VPNonly addition client software, it works fine. However, when the user connects using the FortiClient-ZTNA edition, the default route (0.0.0.0/0) is added to the host machine, forcing all traffic through the VPN, even though split tunneling is configured.

Anyone has any idea?

AEK

SuperUser

Hi Adeel

Which FortiClient version?

AEK

Adeel12Author

New Member

Its Updated Version v7.4.2.1737

AEK

SuperUser

Didn't find such issue in the known issues list.

I already configured split tunnel IPsec for FCT 7.4.0 (licensed edition) and it worked fine.

If you can't try FCT 7.4.0 or 7.4.1 (just to make sure) then I suggest to manually remove the injected gateway while you initiate a ticket with TAC for a sustainable solution.

AEK

Adeel12Author

New Member

Fortigate Firewall Version is V7.2.8 Build 1639, and Forticlient-ZTNA edition version is v7.4.2.1737.
Thanks for your kind response. The issue is fixed for me by reinstalling the Forticlient. IDK what's the issue, but it fixed automatically.

Sign up

Login with SSO

Login to the community

Login with SSO