Printer behind FortiClient not accessible

hi Abel,

Please make sure you have spit tunnel enable in the sslvpn so you that only remote subnet are pointing todards sslvpn adaptor in local pc.

Better to check routing-table in the pc before and after connecting to sslvpn. use "route print" if its a Windows pc. Also do traceroute and check the path

Hello Abel,

There is a possibility that you're using "Tunnel all" and when connected to VPN all the traffic is routed towards Fortigate, you can follow the below guide and configure Split Exclude for SSL VPN.
https://community.fortinet.com/t5/FortiGate/Technical-Tip-Exclude-some-traffic-from-SSL-VPN-using-Trusted/ta-p/230575

If the "tunnel all" is not configured then we will have to verify the configuration and routing table of the end machine when connected with VPN.

also the vm does have to have a route back to the vpn client (or the FGT as default gateway)

Hi,

Thank you very much for the information. I have created the Split Exclude for SSL VPN in the Fortigate firewall but now I cannot RDP into the VMware computer where I should be adding the printer and testing.

It looks like the Split Exclude for SSL VPN which I created is blocking the RDP connection.

Kind Regards,

Abel

Hello Abel,

Can you share the "route print" output from the test machine before and after VPN is connected & mention the VM IP also when connected with VPN you mentioned RDP not working but are you able to ping the VMware PC from the test machine?