Skip to main content
jimson8
New Member
Mar 25, 2026 11:20 PM UTC
Question

IPSEC Dial up Routing Issues

I am working on relaxing our SSL VPN with IPSEC. currently running 7.2.12 on the FG (azure vm) and using the free FTC 7.4.3.

IPSEC is configured with split tunneling, accessible networks is using an address group and all members are subnets. Connection on all FTC apps was imported from a config file.

ISSUE: some devices are getting a 0.0.0.0 route pointing to the ipsec tunnel. other devices are getting the correct routes when connecting.

any ideas what would cause some devices to not get the correct routes?

3 replies

Toshi_Esumi
SuperUser
SuperUser
Mar 25, 2026 11:33 PM UTC

Which side do you have the address group to split the tunnel; policies or portal?
And do you have multiple groups for the same dialup IPsec users?

Toshi

Toshi_Esumi
SuperUser
SuperUser
Mar 26, 2026 12:01 AM UTC

Sorry. I meant to ask either "policies or IPsec phase1-interface" config. I mixed up with SSLVPN.

 

Toshi

hpenmetsa
Staff
Staff
Mar 26, 2026 12:13 AM UTC

Hi, which subnets do you add to the IPsec phase 1 config, Accessible networks? If possible, please share the address group here?
https://community.fortinet.com/t5/FortiGate/Technical-Tip-Enable-split-tunnel-For-IPsec-VPN/ta-p/192266

Thought Leadership. Security Summit. Thursday, November 12th, PGA National Resort, Palm Beach Gardens, FL.
Security Operations Summit: Modernize SecOps. Operate AI-Native.AMER: November 4 | 9:00 AM PST. India and SAARC: November 5 | 10:00 AM IST. EMEA: November 5 | 10:30 AM CET. APAC: November 5 | 11:00 AM SGT