IPsec IKEV2

Hi Team,

I've configured IPsec IKEV2 VPN with all required configs.

My problem is I can connect without internet because the traffic to the DNS pass through a deny policy as I'm using full tunnel.
I created another test policy on the top of policies but no internet and once I remove the group from that policy I can connect to internet.

Note that the group in that policy is added also in authgrps in the tunnel configs and I'm using FAC in my structure.

This screenshot after removing the group and the internet is allowed.

Thanks.

FortiGate